+----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | Operation | Filename | Additional Information | Success | Count | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\ProgramData\qxtqusdnjzrizx418\ | | True | 64 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | c.wnry | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\ProgramData\qxtqusdnjzrizx418\msg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\ProgramData\qxtqusdnjzrizx418\msg/ | | True | 28 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\ProgramData\qxtqusdnjzrizx418\msg | | True | 27 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | 00000000.dky | | False | 42 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | f.wnry | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | @WanaDecryptor@.exe | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | @WanaDecryptor@.exe.lnk | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | @Please_Read_Me@.txt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\*.* | | True | 3 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Desktop\* | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Desktop\* | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default User\Desktop\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\* | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\biBAGpmYUSe2QjdFR.jpg.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\biBAGpmYUSe2QjdFR.jpg | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\H yRMf.docx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\H yRMf.docx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\HwEf8JG56gK9dloNF.csv.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\HwEf8JG56gK9dloNF.csv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\lt4B3l1IwxYf2BNRT.xlsx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\lt4B3l1IwxYf2BNRT.xlsx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\Qb17MfBluTNx_Jw3.jpg.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\Qb17MfBluTNx_Jw3.jpg | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\XIRvPSv.pptx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\XIRvPSv.pptx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\Z89la7110X3Isdf6.doc.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\Z89la7110X3Isdf6.doc | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\* | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\6PkpCF4UAwt | | False | 1 | | | zG4XQLmdz.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\6PkpCF4UAwt | | True | 1 | | | zG4XQLmdz.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\0qdvmG\* | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vAhpvastg | | True | 2 | | | \* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 2 | | | ySj1\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 2 | | | ySj1\2TpOfAj-RuCN\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | False | 1 | | | ySj1\2TpOfAj-RuCN\yLuqbRQ8d4Aff5hp.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 1 | | | ySj1\2TpOfAj-RuCN\yLuqbRQ8d4Aff5hp.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\3kMod_2d6ued.swf.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\3kMod_2d6ued.swf | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\acNDLSZ4zhBDYZiqkOtj.mp3.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\acNDLSZ4zhBDYZiqkOtj.mp3 | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\AjkH5GNvFE8RqZAvyM.png.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\AjkH5GNvFE8RqZAvyM.png | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\blW7.png.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\blW7.png | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\c9dt7hT6oCHW_R.flv.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\c9dt7hT6oCHW_R.flv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\FYcBs5cumF6Dh_Fs.ods.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\FYcBs5cumF6Dh_Fs.ods | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\GFS3QuZvzTMy-jq6XOx.bmp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\GFS3QuZvzTMy-jq6XOx.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\h4mzF.bmp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\h4mzF.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\HYXAAS7ppqLnGG5iR6.mp4.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\HYXAAS7ppqLnGG5iR6.mp4 | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\KIT3qjLuQ U1ehoy.wav.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\KIT3qjLuQ U1ehoy.wav | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\LKwB.wav.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\LKwB.wav | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\m-flkfw.pps.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\m-flkfw.pps | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\p6tG4G.bmp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\p6tG4G.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\YtAJ9X8N5WXOjmUJtmi.gif.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\YtAJ9X8N5WXOjmUJtmi.gif | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\ZB1NbQ.mp4.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\ZB1NbQ.mp4 | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\zU3OcP3f88CN.flv.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\zU3OcP3f88CN.flv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\- JMAjpm5_R | | False | 1 | | | RO.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\- JMAjpm5_R | | True | 1 | | | RO.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\mf1nBO.swf. | | False | 1 | | | WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\mf1nBO.swf | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\0qdvmG\KsLn | | False | 1 | | | I5PUYUJ.flv.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\0qdvmG\KsLn | | True | 1 | | | I5PUYUJ.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\0qdvmG\NtjK | | False | 1 | | | r9CsA.mp4.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\0qdvmG\NtjK | | True | 1 | | | r9CsA.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\0qdvmG\NXDS | | False | 1 | | | MIU.odp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\0qdvmG\NXDS | | True | 1 | | | MIU.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vAhpvastg | | False | 1 | | | \2H9gjYZxUtjTaj VLt76.ods.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vAhpvastg | | True | 1 | | | \2H9gjYZxUtjTaj VLt76.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vAhpvastg | | False | 1 | | | \9WcvzYUQNCPhGsQczKn.png.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vAhpvastg | | True | 1 | | | \9WcvzYUQNCPhGsQczKn.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vAhpvastg | | False | 1 | | | \kPyogARb2oZcKX549D.flv.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vAhpvastg | | True | 1 | | | \kPyogARb2oZcKX549D.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vAhpvastg | | False | 1 | | | \z8MF4.avi.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vAhpvastg | | True | 1 | | | \z8MF4.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | False | 1 | | | ySj1\TEY_zYONKTOL5Ojrt0io.mp4.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 1 | | | ySj1\TEY_zYONKTOL5Ojrt0io.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | False | 1 | | | ySj1\2TpOfAj-RuCN\46iX9DF9_1LvNwSx.mp3.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 1 | | | ySj1\2TpOfAj-RuCN\46iX9DF9_1LvNwSx.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | False | 1 | | | ySj1\2TpOfAj-RuCN\93PM.gif.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 1 | | | ySj1\2TpOfAj-RuCN\93PM.gif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | False | 1 | | | ySj1\2TpOfAj-RuCN\cxY8V.mp4.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 1 | | | ySj1\2TpOfAj-RuCN\cxY8V.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | False | 1 | | | ySj1\2TpOfAj-RuCN\xmeIXQ lMabG-zGr7MPC.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 1 | | | ySj1\2TpOfAj-RuCN\xmeIXQ lMabG-zGr7MPC.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | False | 1 | | | ySj1\2TpOfAj-RuCN\yg84PI.avi.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 1 | | | ySj1\2TpOfAj-RuCN\yg84PI.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | False | 1 | | | ySj1\2TpOfAj-RuCN\YOo37jP7q.wav.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 1 | | | ySj1\2TpOfAj-RuCN\YOo37jP7q.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Desktop\* | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Documents\* | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Documents\* | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Documents\My Music\* | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Documents\My Pictures\* | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Documents\My Videos\* | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default User\Documents\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default User\Documents\My Music\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default User\Documents\My Pictures\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default User\Documents\My Videos\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\* | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\5DWumHpOv0oNd.doc.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\5DWumHpOv0oNd.doc | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\5PFCgtJ7-40fzU.docx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\5PFCgtJ7-40fzU.docx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\9c54.docx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\9c54.docx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\AxMCb.docx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\AxMCb.docx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\F8t0D1HL8MUlgw0YE.pptx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\F8t0D1HL8MUlgw0YE.pptx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\g9fP HfTLRGz5w.xls.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\g9fP HfTLRGz5w.xls | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\GMpHR0w6RrPdHpbef.csv.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\GMpHR0w6RrPdHpbef.csv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\GpImNirm CHKjuIh.xlsx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\GpImNirm CHKjuIh.xlsx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\hEMK7NGCVJGUirn6.xlsx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\hEMK7NGCVJGUirn6.xlsx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\kqsfgiuUv7macLE5Kbe.pptx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\kqsfgiuUv7macLE5Kbe.pptx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\lSiFcdCb6tbfbadh2jc.pptx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\lSiFcdCb6tbfbadh2jc.pptx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\lU6w3Pxpu3cA.xlsx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\lU6w3Pxpu3cA.xlsx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\ly7o.pptx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\ly7o.pptx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\qOcBS.docx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\qOcBS.docx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\tcrD9un1_MYjQ-.pptx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\tcrD9un1_MYjQ-.pptx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Wv7VNssgBfodzvW.xlsx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Wv7VNssgBfodzvW.xlsx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\YzOY0Uk.pptx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\YzOY0Uk.pptx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\ZwKLqrQ2NlsKe44p.xlsx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\ZwKLqrQ2NlsKe44p.xlsx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\_xGWDCsGf MjC6 J.docx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\_xGWDCsGf MjC6 J.docx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\My Music\* | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\My Pictures\* | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\My Videos\* | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\* | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\-NaP.rtf.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\-NaP.rtf | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\9o_u.pdf.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\9o_u.pdf | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\k6FadYNLoUp1zicvTg0o.xl | | False | 1 | | | sx.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\k6FadYNLoUp1zicvTg0o.xl | | True | 1 | | | sx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\p3K5I8nnY2aQ5c.pptx.WNC | | False | 1 | | | RY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\p3K5I8nnY2aQ5c.pptx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\* | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\Y5sY7W | | False | 1 | | | jT_A7KRqnIdGx.xlsx.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\Y5sY7W | | True | 1 | | | jT_A7KRqnIdGx.xlsx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\3e4HO\ | | True | 2 | | | * | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\3e4HO\ | | False | 1 | | | SBXkqAJOvXqwLt.csv.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\3e4HO\ | | True | 1 | | | SBXkqAJOvXqwLt.csv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\* | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\fXx | | False | 1 | | | fW-17sC6wH.ppt.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\fXx | | True | 1 | | | fW-17sC6wH.ppt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\VSh | | False | 1 | | | Y_qomhSb5w.ppt.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\VSh | | True | 1 | | | Y_qomhSb5w.ppt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\TED | | True | 2 | | | c-NsPy XFVlW3\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\TED | | False | 1 | | | c-NsPy XFVlW3\coAFENJkmrN.xlsx.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\TED | | True | 1 | | | c-NsPy XFVlW3\coAFENJkmrN.xlsx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Kqu8OJBHlZr.odp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Kqu8OJBHlZr.odp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\QRACRespeJeu3.ods.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\QRACRespeJeu3.ods | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\T9kBu.ots.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\T9kBu.ots | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\uIgP.odp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\uIgP.odp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\V3b5Lp | | False | 1 | | | gbPFe06XMrQjO.ots.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\V3b5Lp | | True | 1 | | | gbPFe06XMrQjO.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\3e4HO\ | | False | 1 | | | k_5Vq4jHSw8guVo.odp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\3e4HO\ | | True | 1 | | | k_5Vq4jHSw8guVo.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\3e4HO\ | | False | 1 | | | qBQA9 xzsEl7xNAh8.pps.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\3e4HO\ | | True | 1 | | | qBQA9 xzsEl7xNAh8.pps | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\Bzr | | False | 1 | | | Tj.pps.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\Bzr | | True | 1 | | | Tj.pps | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\lo4 | | False | 1 | | | nCZsaz.ots.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\lo4 | | True | 1 | | | nCZsaz.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\nqa | | False | 1 | | | -xbh.odp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\nqa | | True | 1 | | | -xbh.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\TED | | False | 1 | | | c-NsPy XFVlW3\-nOs.ods.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\TED | | True | 1 | | | c-NsPy XFVlW3\-nOs.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\TED | | False | 1 | | | c-NsPy XFVlW3\AxTg6ai5-.ods.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\TED | | True | 1 | | | c-NsPy XFVlW3\AxTg6ai5-.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\TED | | False | 1 | | | c-NsPy XFVlW3\Qz1seNiCHq4fY3oIJRd.ots.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\TED | | True | 1 | | | c-NsPy XFVlW3\Qz1seNiCHq4fY3oIJRd.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Documents\* | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Documents\My Music\* | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Documents\My Pictures\* | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Documents\My Videos\* | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\$Recycle.Bin\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\$Recycle.Bin\S-1-5-21-3385616887-338319549-3229196192-100 | | True | 1 | | | 0\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\cs-CZ\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\da-DK\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\de-DE\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\el-GR\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\en-US\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\es-ES\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\fi-FI\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\Fonts\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\fr-FR\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\hu-HU\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\it-IT\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\ja-JP\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\ko-KR\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\nb-NO\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\nl-NL\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\pl-PL\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\pt-BR\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\pt-PT\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\ru-RU\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\sv-SE\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\tr-TR\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\zh-CN\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\zh-HK\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Boot\zh-TW\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Documents and Settings\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\PerfLogs\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\PerfLogs\Admin\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Recovery\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Recovery\a8ef0822-7920-11e5-85b1-fee83b99d226\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\System Volume Information\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\System Volume Information\SPP\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\System Volume Information\SPP\OnlineMetadataCache\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\System Volume Information\SPP\SppCbsHiveStore\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\System Volume Information\SPP\SppGroupCache\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Application Data\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Favorites\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Assistance\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Assistance\Client\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Assistance\Client\1.0\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Assistance\Client\1.0\en-US\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Crypto\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Crypto\DSS\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Crypto\DSS\MachineKeys\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Crypto\Keys\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Crypto\RSA\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Crypto\RSA\S-1-5-18\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Device\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-4 | | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Device\{8702d817-5 | | True | 1 | | | aad-4674-9ef3-4d3decd87120}\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Task\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6 | | True | 1 | | | e-4fb9-8add-d8f2cf8722c9}\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6 | | True | 1 | | | e-4fb9-8add-d8f2cf8722c9}\en-US\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f74 | | True | 1 | | | 2-4d96-a50a-1775fb1a7a42}\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f74 | | True | 1 | | | 2-4d96-a50a-1775fb1a7a42}\en-US\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\DeviceSync\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\DRM\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\DRM\Server\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\eHome\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\eHome\logs\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Event Viewer\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Event Viewer\Views\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Event Viewer\Views\ApplicationV | | True | 1 | | | iewsRootNode\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\IdentityCRL\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Media Player\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\MF\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Network\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Network\Connections\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Network\Downloader\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\RAC\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\RAC\Outbound\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\RAC\PublishedData\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\RAC\StateData\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\RAC\Temp\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Search\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Search\Data\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Search\Data\Applications\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Search\Data\Applications\Window | | True | 1 | | | s\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Search\Data\Applications\Window | | True | 1 | | | s\Config\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Search\Data\Applications\Window | | True | 1 | | | s\GatherLogs\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Search\Data\Applications\Window | | True | 1 | | | s\GatherLogs\SystemIndex\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Search\Data\Applications\Window | | True | 1 | | | s\Projects\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Search\Data\Applications\Window | | True | 1 | | | s\Projects\SystemIndex\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Search\Data\Applications\Window | | True | 1 | | | s\Projects\SystemIndex\Indexer\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Search\Data\Applications\Window | | True | 1 | | | s\Projects\SystemIndex\Indexer\CiFiles\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Search\Data\Applications\Window | | True | 1 | | | s\Projects\SystemIndex\PropMap\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Search\Data\Applications\Window | | True | 1 | | | s\Projects\SystemIndex\SecStore\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Search\Data\Temp\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Vault\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\AIT\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Caches\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\DeviceMetadataStore\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\DeviceMetadataStore\en- | | True | 1 | | | US\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\DRM\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\DRM\Cache\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\GameExplorer\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Power Efficiency Diagno | | True | 1 | | | stics\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Sqm\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Sqm\Manifest\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Sqm\Sessions\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Sqm\Upload\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Start Menu\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Acc | | True | 1 | | | essories\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Acc | | True | 1 | | | essories\Accessibility\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Acc | | True | 1 | | | essories\System Tools\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Acc | | True | 1 | | | essories\Tablet PC\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Acc | | True | 1 | | | essories\Windows PowerShell\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Adm | | True | 1 | | | inistrative Tools\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Gam | | True | 1 | | | es\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Jav | | True | 1 | | | a\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Mai | | True | 1 | | | ntenance\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Sta | | True | 1 | | | rtup\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Tab | | True | 1 | | | let PC\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Templates\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\WER\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\NonCr | | True | 1 | | | itical_x86_38e744f5ed92b6643d4610f93acebec71c7d44_03443294\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\NonCr | | True | 1 | | | itical_x86_5164e364f554d49c65173057b5da44f5956558a_03444874\ | | | | | | * | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\NonCr | | True | 1 | | | itical_x86_7125ba86c55facb797ac343822852efc7fde5bb0_03681e87 | | | | | | \* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\Definition Upd | | True | 1 | | | ates\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\Definition Upd | | True | 1 | | | ates\Backup\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\Definition Upd | | True | 1 | | | ates\Updates\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\Definition Upd | | True | 1 | | | ates\{21833C5A-BE0D-427D-B68E-EFA18747B9CF}\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\LocalCopy\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\Quarantine\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\Scans\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\Scans\CleanSto | | True | 1 | | | re\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\Scans\CleanSto | | True | 1 | | | re\Entries\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\Scans\CleanSto | | True | 1 | | | re\ResourceData\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\Scans\CleanSto | | True | 1 | | | re\Resources\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\Scans\History\ | | True | 1 | | | * | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\Scans\History\ | | True | 1 | | | CacheManager\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\Scans\History\ | | True | 1 | | | Results\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\Scans\History\ | | True | 1 | | | Results\Resource\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\Scans\History\ | | True | 1 | | | Service\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\Scans\History\ | | True | 1 | | | Store\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows Defender\Support\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows NT\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows NT\MSFax\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows NT\MSFax\ActivityLog\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows NT\MSFax\Common Coverpa | | True | 1 | | | ges\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows NT\MSFax\Common Coverpa | | True | 1 | | | ges\en-US\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows NT\MSFax\Inbox\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows NT\MSFax\Queue\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows NT\MSFax\SentItems\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows NT\MSFax\VirtualInbox\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows NT\MSFax\VirtualInbox\e | | True | 1 | | | n-US\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows NT\MSScan\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows NT\MSScan\WelcomeScan.j | | False | 1 | | | pg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\WwanSvc\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\WwanSvc\Profiles\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Mozilla\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Mozilla\logs\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Oracle\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Oracle\Java\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Oracle\Java\.oracle_jre_usage\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Oracle\Java\installcache\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Oracle\Java\javapath\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\D4036846864773E3D647F421DFE | | True | 1 | | | 7F6CA536E307B\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\D4036846864773E3D647F421DFE | | True | 1 | | | 7F6CA536E307B\packages\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\D4036846864773E3D647F421DFE | | True | 1 | | | 7F6CA536E307B\packages\Patch\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\D4036846864773E3D647F421DFE | | True | 1 | | | 7F6CA536E307B\packages\Patch\x86\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EF | | True | 1 | | | B36DDFFF3E}v12.0.21005\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EF | | True | 1 | | | B36DDFFF3E}v12.0.21005\packages\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371-91EE-EF | | True | 1 | | | B36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1-9bc1-97 | | True | 1 | | | e33d9c2d6f}\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{74d0e5db-b326-4dae-a6b2-44 | | True | 1 | | | 5b9de1836e}\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{A2563E55-3BEC-3828-8D67-E5 | | True | 1 | | | E8B9E8B675}v14.0.23026\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{A2563E55-3BEC-3828-8D67-E5 | | True | 1 | | | E8B9E8B675}v14.0.23026\packages\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{A2563E55-3BEC-3828-8D67-E5 | | True | 1 | | | E8B9E8B675}v14.0.23026\packages\vcRuntimeMinimum_x86\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86 | | True | 1 | | | DC379688B9}v11.0.61030\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86 | | True | 1 | | | DC379688B9}v11.0.61030\packages\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{B175520C-86A2-35A7-8619-86 | | True | 1 | | | DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E | | True | 1 | | | 7925026EBB}v11.0.61030\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E | | True | 1 | | | 7925026EBB}v11.0.61030\packages\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E | | True | 1 | | | 7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{BE960C1C-7BAD-3DE6-8B1A-26 | | True | 1 | | | 16FE532845}v14.0.23026\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{BE960C1C-7BAD-3DE6-8B1A-26 | | True | 1 | | | 16FE532845}v14.0.23026\packages\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{BE960C1C-7BAD-3DE6-8B1A-26 | | True | 1 | | | 16FE532845}v14.0.23026\packages\vcRuntimeAdditional_x86\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2-9788-6e | | True | 1 | | | a593ce702d}\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B | | True | 1 | | | 11EDEFC185}v12.0.21005\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B | | True | 1 | | | 11EDEFC185}v12.0.21005\packages\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971-9EDA-4B | | True | 1 | | | 11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x86\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\qxtqusdnjzrizx418\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\qxtqusdnjzrizx418\msg\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Start Menu\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Templates\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Application Data\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\History\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Credentials\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Feeds\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Fee | | True | 1 | | | ds~\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Feeds\{5588ACFD-643 | | True | 1 | | | 6-411B-A5CE-666AE6A92D3D}~\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Feeds\{5588ACFD-643 | | True | 1 | | | 6-411B-A5CE-666AE6A92D3D}~\WebSlices~\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\4CSSRV0 | | True | 1 | | | 0\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\DT1GIE4 | | True | 1 | | | D\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\F6GEI81 | | True | 1 | | | Z\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\GXO2H2P | | True | 1 | | | J\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\b | | False | 1 | | | rndlog.txt.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Media Player\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync P | | True | 1 | | | laylists\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync P | | True | 1 | | | laylists\en-US\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync P | | True | 1 | | | laylists\en-US\0000FDBE\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\Burn\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\Burn\Burn\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\Caches\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\Explorer\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\GameExplore | | True | 1 | | | r\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\History\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\History\His | | True | 1 | | | tory.IE5\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\History\Low | | True | 1 | | | \* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\Ringtones\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\WER\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\WER\ERC\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\WER\ReportA | | True | 1 | | | rchive\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup | | True | 1 | | | \* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup | | True | 1 | | | \new\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | True | 1 | | | nery\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\Bears.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\Garden.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\GreenBubbles.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\HandPrints.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\OrangeCircles.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\Peacock.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\Roses.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\ShadesOfBlue.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\SoftBlue.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\Stars.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Media\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Media\12.0\ | | True | 1 | | | * | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\Gad | | True | 1 | | | gets\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\LocalLow\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Identities\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Identities\{B85DCA4A-5C21-4 | | True | 1 | | | EC5-AF48-A2A88CD3D1D9}\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Credentials\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Crypto\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Crypto\RSA\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer | | True | 1 | | | \* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer | | True | 1 | | | \Quick Launch\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer | | True | 1 | | | \Quick Launch\User Pinned\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer | | True | 1 | | | \Quick Launch\User Pinned\ImplicitAppShortcuts\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer | | True | 1 | | | \Quick Launch\User Pinned\TaskBar\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Protect\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Protect\S-1-5-21- | | True | 1 | | | 892523515-1518344882-2423736544-500\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificate | | True | 1 | | | s\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificate | | True | 1 | | | s\My\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificate | | True | 1 | | | s\My\Certificates\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificate | | True | 1 | | | s\My\CRLs\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificate | | True | 1 | | | s\My\CTLs\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\IECompatC | | True | 1 | | | ache\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\IECompatC | | True | 1 | | | ache\Low\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\IETldCach | | True | 1 | | | e\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\IETldCach | | True | 1 | | | e\Low\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Libraries | | True | 1 | | | \* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network S | | True | 1 | | | hortcuts\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer S | | True | 1 | | | hortcuts\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\PrivacIE\ | | True | 1 | | | * | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\PrivacIE\ | | True | 1 | | | Low\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent\Au | | True | 1 | | | tomaticDestinations\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent\Cu | | True | 1 | | | stomDestinations\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Men | | True | 1 | | | u\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Men | | True | 1 | | | u\Programs\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Men | | True | 1 | | | u\Programs\Accessories\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Men | | True | 1 | | | u\Programs\Accessories\Accessibility\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Men | | True | 1 | | | u\Programs\Accessories\System Tools\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Men | | True | 1 | | | u\Programs\Administrative Tools\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Men | | True | 1 | | | u\Programs\Maintenance\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Men | | True | 1 | | | u\Programs\Startup\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates | | True | 1 | | | \* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Themes\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Themes\Tr | | False | 1 | | | anscodedWallpaper.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Application Data\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Contacts\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Cookies\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Downloads\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Favorites\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Favorites\Links\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Favorites\Microsoft Websites\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Favorites\MSN Websites\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Favorites\Windows Live\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Links\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Local Settings\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Music\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\My Documents\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\NetHood\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Pictures\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\PrintHood\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Recent\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Saved Games\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Searches\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\SendTo\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Start Menu\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Templates\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\Videos\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default User\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Application Data\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Google\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Google\CrashReports\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\History\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Credentials\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Event Viewer\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds\Microsoft | | True | 1 | | | Feeds~\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds\{5588ACFD- | | True | 1 | | | 6436-411B-A5CE-666AE6A92D3D}~\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds\{5588ACFD- | | True | 1 | | | 6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds Cache\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds Cache\4CSS | | True | 1 | | | RV00\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds Cache\DT1G | | True | 1 | | | IE4D\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds Cache\F6GE | | True | 1 | | | I81Z\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds Cache\GXO2 | | True | 1 | | | H2PJ\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Internet Explore | | True | 1 | | | r\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Internet Explore | | False | 1 | | | r\brndlog.txt.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Internet Explore | | True | 1 | | | r\Recovery\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Internet Explore | | True | 1 | | | r\Recovery\Active\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Internet Explore | | True | 1 | | | r\Recovery\Last Active\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Media Player\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Media Player\Syn | | True | 1 | | | c Playlists\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Media Player\Syn | | True | 1 | | | c Playlists\en-US\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Media Player\Syn | | True | 1 | | | c Playlists\en-US\0000CD9A\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Media Player\Syn | | True | 1 | | | c Playlists\en-US\0000FDBE\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\TaskSchedulerCon | | True | 1 | | | fig\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\1033\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Burn\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Burn\Bur | | True | 1 | | | n\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Burn\Bur | | True | 1 | | | n1\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Caches\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Explorer | | True | 1 | | | \* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\GameExpl | | True | 1 | | | orer\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\History\ | | True | 1 | | | * | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\History\ | | True | 1 | | | History.IE5\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\History\ | | True | 1 | | | History.IE5\MSHist012017051520170516\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\History\ | | True | 1 | | | Low\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\History\ | | True | 1 | | | Low\History.IE5\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\History\ | | True | 1 | | | Low\History.IE5\MSHist012016110220161103\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Ringtone | | True | 1 | | | s\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Themes\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\WER\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\WER\ERC\ | | True | 1 | | | * | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\WER\Repo | | True | 1 | | | rtArchive\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\WER\Repo | | True | 1 | | | rtQueue\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Bac | | True | 1 | | | kup\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Bac | | True | 1 | | | kup\new\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | True | 1 | | | tionery\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\Bears.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\Garden.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\GreenBubbles.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\HandPrints.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\OrangeCircles.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\Peacock.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\Roses.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\ShadesOfBlue.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\SoftBlue.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\Stars.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Media\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Media\12 | | True | 1 | | | .0\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Sidebar\ | | True | 1 | | | * | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Sidebar\ | | True | 1 | | | Gadgets\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\VirtualStore\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\CryptnetUrlCa | | True | 1 | | | che\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\CryptnetUrlCa | | True | 1 | | | che\Content\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\CryptnetUrlCa | | True | 1 | | | che\MetaData\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\Internet Expl | | True | 1 | | | orer\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\Internet Expl | | True | 1 | | | orer\DOMStore\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\Internet Expl | | True | 1 | | | orer\DOMStore\1PPOL5ZC\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\Internet Expl | | True | 1 | | | orer\DOMStore\68U8IHRK\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\Internet Expl | | True | 1 | | | orer\DOMStore\B10W93ND\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\Internet Expl | | True | 1 | | | orer\DOMStore\LS3151YD\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\Internet Expl | | True | 1 | | | orer\Services\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\0\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\1\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\10\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\11\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\12\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\13\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\14\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\15\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\16\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\17\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\18\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\19\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\2\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\20\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\21\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\22\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\23\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\24\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\25\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\26\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\27\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\28\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\29\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\3\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\30\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\31\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\32\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\33\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\34\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\35\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\36\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\37\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\38\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\39\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\4\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\40\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\41\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\42\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\43\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\44\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\45\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\46\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\47\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\48\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\49\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\5\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\50\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\51\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\52\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\53\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\54\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\55\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\56\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\57\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\58\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\59\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\6\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\60\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\61\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\62\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\63\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\7\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\8\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\9\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\host\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\muffin\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\6.0\tmp\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\cac | | True | 1 | | | he\security\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\ext | | True | 1 | | | \* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\log | | True | 1 | | | \* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\sec | | True | 1 | | | urity\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\tmp | | True | 1 | | | \* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deployment\tmp | | True | 1 | | | \si\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\D56IE.csv.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\dX-rNSK.jpg.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\ir5GayTBg.jpg.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\MPX3V.xlsx.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\o7p_l.xls.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\OZQ_qXmBlgN17N.pdf.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Identities\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Identities\{B85DCA4A-5C2 | | True | 1 | | | 1-4EC5-AF48-A2A88CD3D1D9}\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Credentials\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Crypto\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Crypto\RSA\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Crypto\RSA\S-1 | | True | 1 | | | -5-21-3385616887-338319549-3229196192-1000\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Internet Explo | | True | 1 | | | rer\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Internet Explo | | True | 1 | | | rer\Quick Launch\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Internet Explo | | True | 1 | | | rer\Quick Launch\User Pinned\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Internet Explo | | True | 1 | | | rer\Quick Launch\User Pinned\ImplicitAppShortcuts\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Internet Explo | | True | 1 | | | rer\Quick Launch\User Pinned\TaskBar\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\MMC\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Network\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Network\Connec | | True | 1 | | | tions\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Network\Connec | | True | 1 | | | tions\Pbk\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Network\Connec | | True | 1 | | | tions\Pbk\_hiddenPbk\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Protect\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Protect\S-1-5- | | True | 1 | | | 21-3385616887-338319549-3229196192-1000\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Protect\S-1-5- | | True | 1 | | | 21-892523515-1518344882-2423736544-500\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\SystemCertific | | True | 1 | | | ates\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\SystemCertific | | True | 1 | | | ates\My\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\SystemCertific | | True | 1 | | | ates\My\Certificates\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\SystemCertific | | True | 1 | | | ates\My\CRLs\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\SystemCertific | | True | 1 | | | ates\My\CTLs\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Cookie | | True | 1 | | | s\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Cookie | | True | 1 | | | s\Low\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\IEComp | | True | 1 | | | atCache\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\IEComp | | True | 1 | | | atCache\Low\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\IETldC | | True | 1 | | | ache\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\IETldC | | True | 1 | | | ache\Low\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Librar | | True | 1 | | | ies\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Networ | | True | 1 | | | k Shortcuts\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Printe | | True | 1 | | | r Shortcuts\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Privac | | True | 1 | | | IE\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Privac | | True | 1 | | | IE\Low\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Recent | | True | 1 | | | \* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Recent | | True | 1 | | | \AutomaticDestinations\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Recent | | True | 1 | | | \CustomDestinations\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\SendTo | | True | 1 | | | \* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Start | | True | 1 | | | Menu\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Start | | True | 1 | | | Menu\Programs\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Start | | True | 1 | | | Menu\Programs\Accessories\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Start | | True | 1 | | | Menu\Programs\Accessories\Accessibility\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Start | | True | 1 | | | Menu\Programs\Accessories\System Tools\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Start | | True | 1 | | | Menu\Programs\Administrative Tools\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Start | | True | 1 | | | Menu\Programs\Maintenance\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Start | | True | 1 | | | Menu\Programs\Startup\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Templa | | True | 1 | | | tes\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Themes | | True | 1 | | | \* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Themes | | False | 1 | | | \TranscodedWallpaper.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Sun\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Sun\Java\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Sun\Java\Deployment\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Application Data\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Contacts\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Cookies\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\biBAGpmYUSe2QjdFR.jpg.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\H yRMf.docx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\HwEf8JG56gK9dloNF.csv.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\lt4B3l1IwxYf2BNRT.xlsx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\Qb17MfBluTNx_Jw3.jpg.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\XIRvPSv.pptx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\Z89la7110X3Isdf6.doc.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\6PkpCF4UAwt | | True | 1 | | | zG4XQLmdz.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 1 | | | ySj1\2TpOfAj-RuCN\yLuqbRQ8d4Aff5hp.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\5DWumHpOv0oNd.doc.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\5PFCgtJ7-40fzU.docx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\9c54.docx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\AxMCb.docx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\F8t0D1HL8MUlgw0YE.pptx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\g9fP HfTLRGz5w.xls.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\GMpHR0w6RrPdHpbef.csv.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\GpImNirm CHKjuIh.xlsx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\hEMK7NGCVJGUirn6.xlsx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\kqsfgiuUv7macLE5Kbe.pptx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\lSiFcdCb6tbfbadh2jc.pptx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\lU6w3Pxpu3cA.xlsx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\ly7o.pptx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\qOcBS.docx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\tcrD9un1_MYjQ-.pptx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Wv7VNssgBfodzvW.xlsx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\YzOY0Uk.pptx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\ZwKLqrQ2NlsKe44p.xlsx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\_xGWDCsGf MjC6 J.docx.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\-NaP.rtf.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\9o_u.pdf.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\k6FadYNLoUp1zicvTg0o.xl | | True | 1 | | | sx.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\p3K5I8nnY2aQ5c.pptx.WNC | | True | 1 | | | RY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\Y5sY7W | | True | 1 | | | jT_A7KRqnIdGx.xlsx.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\3e4HO\ | | True | 1 | | | SBXkqAJOvXqwLt.csv.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\fXx | | True | 1 | | | fW-17sC6wH.ppt.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\VSh | | True | 1 | | | Y_qomhSb5w.ppt.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\TED | | True | 1 | | | c-NsPy XFVlW3\coAFENJkmrN.xlsx.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Downloads\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Favorites\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Favorites\Links\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Favorites\Microsoft Websites\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Favorites\MSN Websites\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Favorites\Windows Live\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Links\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Local Settings\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\fqNE\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\gzfr8pq\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\0-sD9L8U\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\r4lSao\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\ZHuw0MA_qHQt\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\My Documents\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\NetHood\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\55WOZ240.jpg.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\J5LNdpj\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\J5LNdpj\RElY_w0.jpg.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\J5LNdpj\txoKdckRvk.jpg.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\Jd8VsRICzqxDx9VoB\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\Jd8VsRICzqxDx9VoB\u0Low_3k9h1Go | | False | 1 | | | PY7.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\BhbsuWYvu\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\g7VbdhsAvPJRP7 | | True | 1 | | | \* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\g7VbdhsAvPJRP7 | | False | 1 | | | \UvRcjVwuEV0RC6U9M.jpg.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\_2HZDo\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\_2HZDo\SoyIwozbTZRKlfZgMav.jpg. | | False | 1 | | | WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\PrintHood\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Recent\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Saved Games\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Searches\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\SendTo\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Start Menu\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Templates\* | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\Fxinkj5Qtq47dCBmWz\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\haKYSLTY-M-z9\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\eWpNrtKDx2ttVn | | True | 1 | | | FQ8J\* | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Downloads\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Favorites\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Libraries\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Music\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Music\Sample Music\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\Sample Pictures\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg.W | | False | 1 | | | NCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\Sample Pictures\Desert.jpg.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg.WNCR | | False | 1 | | | Y | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\Sample Pictures\Koala.jpg.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg.WNCR | | False | 1 | | | Y | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Recorded TV\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Recorded TV\Sample Media\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Videos\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Videos\Sample Videos\* | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\BOOTSECT.BAK.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-4 | | False | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\background.png.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-4 | | False | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\device.png.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-4 | | False | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\overlay.png.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-4 | | False | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\superbar.png.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Device\{8702d817-5 | | False | 1 | | | aad-4674-9ef3-4d3decd87120}\background.png.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Device\{8702d817-5 | | False | 1 | | | aad-4674-9ef3-4d3decd87120}\watermark.png.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Search\Data\Applications\Window | | False | 1 | | | s\Windows.edb.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\guest.bmp | | False | 1 | | | .WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\user.bmp. | | False | 1 | | | WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile10.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile11.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile12.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile13.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile14.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile15.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile16.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile17.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile18.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile19.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile20.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile21.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile22.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile23.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile24.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile25.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile26.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile27.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile28.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile29.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile30.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile31.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile32.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile33.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile34.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile35.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile36.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile37.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile38.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile39.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile40.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile41.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile42.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile43.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | False | 1 | | | ictures\usertile44.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Caches\cversions.2.db.W | | False | 1 | | | NCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Caches\{67D69890-D853-4 | | False | 1 | | | 011-A87E-AA64FA83CE5A}.2.ver0x0000000000000002.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Caches\{6AF0698E-D558-4 | | False | 1 | | | F6E-9B3C-3716689AF493}.2.ver0x0000000000000004.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Caches\{6AF0698E-D558-4 | | False | 1 | | | F6E-9B3C-3716689AF493}.2.ver0x0000000000000005.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Caches\{6AF0698E-D558-4 | | False | 1 | | | F6E-9B3C-3716689AF493}.2.ver0x0000000000000006.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Caches\{6AF0698E-D558-4 | | False | 1 | | | F6E-9B3C-3716689AF493}.2.ver0x0000000000000007.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Caches\{7CD55808-3D38-4 | | False | 1 | | | DD5-90C9-62F0E6EE60D4}.2.ver0x0000000000000001.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Caches\{DDF571F2-BE98-4 | | False | 1 | | | 26D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 01.w | | False | 1 | | | ma.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 02.w | | False | 1 | | | ma.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 03.w | | False | 1 | | | ma.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 04.w | | False | 1 | | | ma.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 05.w | | False | 1 | | | ma.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 06.w | | False | 1 | | | ma.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 07.w | | False | 1 | | | ma.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 08.w | | False | 1 | | | ma.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 09.w | | False | 1 | | | ma.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 10.w | | False | 1 | | | ma.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows NT\MSFax\VirtualInbox\e | | False | 1 | | | n-US\WelcomeFax.tif.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\IconCache.db.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\Explorer\th | | False | 1 | | | umbcache_256.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\Explorer\th | | False | 1 | | | umbcache_idx.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\IconCache.db.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Internet Explore | | False | 1 | | | r\brndlog.bak.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Caches\c | | False | 1 | | | versions.1.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Caches\{ | | False | 1 | | | AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000 | | | | | | f.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Caches\{ | | False | 1 | | | AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001 | | | | | | 0.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Explorer | | False | 1 | | | \thumbcache_256.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Explorer | | False | 1 | | | \thumbcache_32.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Explorer | | False | 1 | | | \thumbcache_96.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Explorer | | False | 1 | | | \thumbcache_idx.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\BP7n0_qwTWKOrxG.mp3.WNCR | | False | 1 | | | Y | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\bywI0QluWl3W9BuD5f3o.gif | | False | 1 | | | .WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\daYIJ9-o1e8.bmp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\dHLstwcTU20.swf.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\DjLKlpzvVty.swf.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\dz0vPTP5oWvHzt.bmp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\G2kjJOGGR_cGbs8B.flv.WNC | | False | 1 | | | RY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\g_IAP-Kg5-s.wav.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\JQZjF0K.bmp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\mHjvG24DoFM.pps.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Nrae.png.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\O8fcDDPBkgPE-.swf.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\ojEfR7Lfa6sgoK2mjmm.mp3. | | False | 1 | | | WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\oRFN2VwItjwW5.bmp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\pH1dzO_.png.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\QQ1a2p8pIiy_eDbCLi.mkv.W | | False | 1 | | | NCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Qwg2CVFqC9ez1jCA.mp3.WNC | | False | 1 | | | RY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\RA-n6LUBAsx5.swf.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\rjweM.avi.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\sH5E3mmJVUx.mkv.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\sL9eRsroH9ZEq.png.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\uAEbZGeiEGNeOdNlxnCN.mkv | | False | 1 | | | .WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\uLTbJg f.pps.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\UYwbA9Uh15VMu3eTzhh-.mkv | | False | 1 | | | .WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\VSm1crHDJX95VtWS.flv.WNC | | False | 1 | | | RY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\WGxrL2.odt.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\XdSQx_wXF9K9q.bmp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\xF1J6kjKtJPO ac8GR6.ots. | | False | 1 | | | WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\zMeJ2xz6d3on_BH9Gk7G.wav | | False | 1 | | | .WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\3kMod_2d6ued.swf.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\acNDLSZ4zhBDYZiqkOtj.mp3.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\AjkH5GNvFE8RqZAvyM.png.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\blW7.png.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\c9dt7hT6oCHW_R.flv.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\FYcBs5cumF6Dh_Fs.ods.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\GFS3QuZvzTMy-jq6XOx.bmp.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\h4mzF.bmp.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\HYXAAS7ppqLnGG5iR6.mp4.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\KIT3qjLuQ U1ehoy.wav.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\LKwB.wav.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\m-flkfw.pps.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\p6tG4G.bmp.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\YtAJ9X8N5WXOjmUJtmi.gif.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\ZB1NbQ.mp4.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\zU3OcP3f88CN.flv.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\- JMAjpm5_R | | True | 1 | | | RO.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\mf1nBO.swf. | | True | 1 | | | WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\0qdvmG\KsLn | | True | 1 | | | I5PUYUJ.flv.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\0qdvmG\NtjK | | True | 1 | | | r9CsA.mp4.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\0qdvmG\NXDS | | True | 1 | | | MIU.odp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vAhpvastg | | True | 1 | | | \2H9gjYZxUtjTaj VLt76.ods.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vAhpvastg | | True | 1 | | | \9WcvzYUQNCPhGsQczKn.png.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vAhpvastg | | True | 1 | | | \kPyogARb2oZcKX549D.flv.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vAhpvastg | | True | 1 | | | \z8MF4.avi.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 1 | | | ySj1\TEY_zYONKTOL5Ojrt0io.mp4.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 1 | | | ySj1\2TpOfAj-RuCN\46iX9DF9_1LvNwSx.mp3.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 1 | | | ySj1\2TpOfAj-RuCN\93PM.gif.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 1 | | | ySj1\2TpOfAj-RuCN\cxY8V.mp4.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 1 | | | ySj1\2TpOfAj-RuCN\xmeIXQ lMabG-zGr7MPC.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 1 | | | ySj1\2TpOfAj-RuCN\yg84PI.avi.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | True | 1 | | | ySj1\2TpOfAj-RuCN\YOo37jP7q.wav.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Kqu8OJBHlZr.odp.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\QRACRespeJeu3.ods.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\T9kBu.ots.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\uIgP.odp.WNCRY | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\V3b5Lp | | True | 1 | | | gbPFe06XMrQjO.ots.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\3e4HO\ | | True | 1 | | | k_5Vq4jHSw8guVo.odp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\3e4HO\ | | True | 1 | | | qBQA9 xzsEl7xNAh8.pps.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\Bzr | | True | 1 | | | Tj.pps.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\lo4 | | True | 1 | | | nCZsaz.ots.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\nqa | | True | 1 | | | -xbh.odp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\TED | | True | 1 | | | c-NsPy XFVlW3\-nOs.ods.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\TED | | True | 1 | | | c-NsPy XFVlW3\AxTg6ai5-.ods.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\TED | | True | 1 | | | c-NsPy XFVlW3\Qz1seNiCHq4fY3oIJRd.ots.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\Dfkh.wav.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\HMdiZtpptjk3.wav.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\ZPtaBq.mp3.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\lk-VjLkc3MbXEBkRaUk.wa | | False | 1 | | | v.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\fqNE\9 bXR.wav.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\fqNE\bm1Lj1elmAHV.wav. | | False | 1 | | | WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\fqNE\HwQ_e63AiB.wav.WN | | False | 1 | | | CRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\fqNE\QnI_.mp3.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\fqNE\ZhvacU3ZM4Pi0LqV. | | False | 1 | | | mp3.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\gzfr8pq\0qrD5fx.mp3.WN | | False | 1 | | | CRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\gzfr8pq\VoX09UMk.mp3.W | | False | 1 | | | NCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\2REugW.wav.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\4SArhcVJd04q.mp3. | | False | 1 | | | WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\9z_EhnKs.wav.WNCR | | False | 1 | | | Y | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\c5aLotv4.wav.WNCR | | False | 1 | | | Y | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\KFqjLmneLQ.mp3.WN | | False | 1 | | | CRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\MLX4g8dG4DbCwaO4. | | False | 1 | | | wav.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\0-sD9L8U\dJI4emFC | | False | 1 | | | XZ9.wav.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\r4lSao\CsXH-DP0PZ | | False | 1 | | | vfbFnND.mp3.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\ZHuw0MA_qHQt\gi9i | | False | 1 | | | P_Csel.mp3.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\ZHuw0MA_qHQt\S9_2 | | False | 1 | | | q.wav.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\ZHuw0MA_qHQt\xYSC | | False | 1 | | | fW4.mp3.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\aicIrCK.gif.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\DRbA.bmp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\eSZy HkfDwfx0.bmp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\ImjWbTSsHXgLoI.gif.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\n5VvG0H1npv.bmp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\PWVh0SXS 4U.gif.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\R9TluytrYPiqhwf.gif.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\_y79.bmp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\J5LNdpj\5HE-Bihy791Udb060Xb.gif | | False | 1 | | | .WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\J5LNdpj\JGg9PIy6C.bmp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\Jd8VsRICzqxDx9VoB\4r2l.png.WNCR | | False | 1 | | | Y | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\Jd8VsRICzqxDx9VoB\wOSCtyoZYGI-. | | False | 1 | | | png.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\d0iFK_s5CqBrv.png.WNCR | | False | 1 | | | Y | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\H PgOrP n6U.bmp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\RgfJLX032Dp7.gif.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\wU4tbYKXF6k0p.bmp.WNCR | | False | 1 | | | Y | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\xqJ6Y5VSD79YpDJYjlfN.p | | False | 1 | | | ng.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\ZLPVbNiTdRC.png.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\_nMLiCbF8J8NqYjJ7Kp.bm | | False | 1 | | | p.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\2BzR.gif.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\kHl4eGo4d 5rt4 | | False | 1 | | | l.bmp.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\SPxsPLGrT3P.pn | | False | 1 | | | g.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\xYz8CE1lhaIMq. | | False | 1 | | | gif.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\BhbsuWYvu\AWko | | False | 1 | | | RjfJ_tBWlBiOWT.png.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\BhbsuWYvu\MNu7 | | False | 1 | | | K.png.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\BhbsuWYvu\OxDt | | False | 1 | | | .png.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\g7VbdhsAvPJRP7 | | False | 1 | | | \MHaNQ6MS_JZ SSx.png.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\_2HZDo\8R-qYt.png.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\_2HZDo\DDw1j2dVM.bmp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\_2HZDo\EhTgSX0.bmp.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\_2HZDo\OIpUtXJ.png.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\_2HZDo\WXqSaaQ6I.gif.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\0rT9N7WaqqVk6-S.swf.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\GLS-An3bnb6SU.mkv.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\Hi-kH7N3AmaCgd.mkv.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\OUvp28f9EWMI29.swf.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\RLH2Om7HScEO6PZume.swf.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\Fxinkj5Qtq47dCBmWz\676ht6Zbx.mkv. | | False | 1 | | | WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\Fxinkj5Qtq47dCBmWz\929sjpu-xRkJ3e | | False | 1 | | | 1T9j7.mkv.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\Fxinkj5Qtq47dCBmWz\BCyq1.flv.WNCR | | False | 1 | | | Y | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\Fxinkj5Qtq47dCBmWz\hvE _FFgg.avi. | | False | 1 | | | WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\Fxinkj5Qtq47dCBmWz\OiA-6xvKP.swf. | | False | 1 | | | WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\Fxinkj5Qtq47dCBmWz\Peij538fk.mp4. | | False | 1 | | | WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\haKYSLTY-M-z9\2IW7K-.mkv.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\haKYSLTY-M-z9\KdlAZanuXNJLG4yRHVf | | False | 1 | | | q.mp4.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\haKYSLTY-M-z9\L1FQ7B itpWHHcdAB05 | | False | 1 | | | U.avi.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\haKYSLTY-M-z9\lhHBjhEVI.mkv.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\haKYSLTY-M-z9\MILwbJ.flv.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\haKYSLTY-M-z9\mR1eX3.swf.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\haKYSLTY-M-z9\Vc2CL4ln.mkv.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\4OJ9yfl3dn.flv.WNCR | | False | 1 | | | Y | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\AgmTJGfX.mkv.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\hSBc.mkv.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\hwJ0zzo_R1Q_PFff2.a | | False | 1 | | | vi.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\kJ9Gatk fbtMTZAT.sw | | False | 1 | | | f.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\nbuAOs9o4ZD04F6rVgQ | | False | 1 | | | y.swf.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\RH6X.mp4.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\_AkUOD4i4xU431o1MVn | | False | 1 | | | E.flv.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\GDHhHwNB.flv.W | | False | 1 | | | NCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\t0_1iokBD.swf. | | False | 1 | | | WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\VbvvVVB4I.mkv. | | False | 1 | | | WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\YdjJQOANi2heTy | | False | 1 | | | 5E.mkv.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\eWpNrtKDx2ttVn | | False | 1 | | | FQ8J\87xpzn.mp4.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\eWpNrtKDx2ttVn | | False | 1 | | | FQ8J\dd3QogjnlSGKG1--_VS.mkv.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\eWpNrtKDx2ttVn | | False | 1 | | | FQ8J\dJQC-.mkv.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\eWpNrtKDx2ttVn | | False | 1 | | | FQ8J\imMDTkS6K.flv.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\eWpNrtKDx2ttVn | | False | 1 | | | FQ8J\osbg1M5t.flv.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\eWpNrtKDx2ttVn | | False | 1 | | | FQ8J\qa9nXIo402_he z.swf.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Music\Sample Music\Kalimba.mp3.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair | | False | 1 | | | .mp3.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Music\Sample Music\Sleep Away.mp3.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Videos\Sample Videos\Wildlife.wmv.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\autoexec.bat.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\Explorer\th | | False | 1 | | | umbcache_1024.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\Explorer\th | | False | 1 | | | umbcache_32.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\Explorer\th | | False | 1 | | | umbcache_96.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\Explorer\th | | False | 1 | | | umbcache_sr.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Explorer | | False | 1 | | | \thumbcache_1024.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Explorer | | False | 1 | | | \thumbcache_sr.db.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Cookie | | False | 1 | | | s\Low\dssdpmx042@google[2].txt.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Cookie | | False | 1 | | | s\Low\dssdpmx042@java[1].txt.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Cookie | | False | 1 | | | s\Low\dssdpmx042@oracle.112.2o7[2].txt.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\hiberfil.sys.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\pagefile.sys.WNCRY | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\System Volume Information\{458a7c4b-78cd-11e5-8fa6-c8f981 | | False | 1 | | | b0cd47}{3808876b-c176-4e48-b7ae-04046e6cc752}.WNCRY | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\biBAGpmYUSe2QjdFR.jpg | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\H yRMf.docx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\HwEf8JG56gK9dloNF.csv | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\lt4B3l1IwxYf2BNRT.xlsx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\Qb17MfBluTNx_Jw3.jpg | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\XIRvPSv.pptx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\Z89la7110X3Isdf6.doc | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\6PkpCF4UAwt | | False | 2 | | | zG4XQLmdz.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | False | 2 | | | ySj1\2TpOfAj-RuCN\yLuqbRQ8d4Aff5hp.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\3kMod_2d6ued.swf | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\acNDLSZ4zhBDYZiqkOtj.mp3 | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\AjkH5GNvFE8RqZAvyM.png | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\blW7.png | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\c9dt7hT6oCHW_R.flv | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\FYcBs5cumF6Dh_Fs.ods | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\GFS3QuZvzTMy-jq6XOx.bmp | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\h4mzF.bmp | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\HYXAAS7ppqLnGG5iR6.mp4 | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\KIT3qjLuQ U1ehoy.wav | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\LKwB.wav | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\m-flkfw.pps | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\p6tG4G.bmp | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\YtAJ9X8N5WXOjmUJtmi.gif | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\ZB1NbQ.mp4 | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\zU3OcP3f88CN.flv | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\- JMAjpm5_R | | False | 2 | | | RO.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\mf1nBO.swf | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\0qdvmG\KsLn | | False | 2 | | | I5PUYUJ.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\0qdvmG\NtjK | | False | 2 | | | r9CsA.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\0qdvmG\NXDS | | False | 2 | | | MIU.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vAhpvastg | | False | 2 | | | \2H9gjYZxUtjTaj VLt76.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vAhpvastg | | False | 2 | | | \9WcvzYUQNCPhGsQczKn.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vAhpvastg | | False | 2 | | | \kPyogARb2oZcKX549D.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vAhpvastg | | False | 2 | | | \z8MF4.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | False | 2 | | | ySj1\TEY_zYONKTOL5Ojrt0io.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | False | 2 | | | ySj1\2TpOfAj-RuCN\46iX9DF9_1LvNwSx.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | False | 2 | | | ySj1\2TpOfAj-RuCN\93PM.gif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | False | 2 | | | ySj1\2TpOfAj-RuCN\cxY8V.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | False | 2 | | | ySj1\2TpOfAj-RuCN\xmeIXQ lMabG-zGr7MPC.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | False | 2 | | | ySj1\2TpOfAj-RuCN\yg84PI.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXSfGzRgx3 | | False | 2 | | | ySj1\2TpOfAj-RuCN\YOo37jP7q.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\5DWumHpOv0oNd.doc | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\5PFCgtJ7-40fzU.docx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\9c54.docx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\AxMCb.docx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\F8t0D1HL8MUlgw0YE.pptx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\g9fP HfTLRGz5w.xls | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\GMpHR0w6RrPdHpbef.csv | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\GpImNirm CHKjuIh.xlsx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\hEMK7NGCVJGUirn6.xlsx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\kqsfgiuUv7macLE5Kbe.pptx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\lSiFcdCb6tbfbadh2jc.pptx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\lU6w3Pxpu3cA.xlsx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\ly7o.pptx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\qOcBS.docx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\tcrD9un1_MYjQ-.pptx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Wv7VNssgBfodzvW.xlsx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\YzOY0Uk.pptx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\ZwKLqrQ2NlsKe44p.xlsx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\_xGWDCsGf MjC6 J.docx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\-NaP.rtf | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\9o_u.pdf | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\k6FadYNLoUp1zicvTg0o.xl | | False | 2 | | | sx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\p3K5I8nnY2aQ5c.pptx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\Y5sY7W | | False | 2 | | | jT_A7KRqnIdGx.xlsx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\3e4HO\ | | False | 2 | | | SBXkqAJOvXqwLt.csv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\fXx | | False | 2 | | | fW-17sC6wH.ppt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\VSh | | False | 2 | | | Y_qomhSb5w.ppt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\TED | | False | 2 | | | c-NsPy XFVlW3\coAFENJkmrN.xlsx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Kqu8OJBHlZr.odp | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\QRACRespeJeu3.ods | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\T9kBu.ots | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\uIgP.odp | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\V3b5Lp | | False | 2 | | | gbPFe06XMrQjO.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\3e4HO\ | | False | 2 | | | k_5Vq4jHSw8guVo.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC\3e4HO\ | | False | 2 | | | qBQA9 xzsEl7xNAh8.pps | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\Bzr | | False | 2 | | | Tj.pps | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\lo4 | | False | 2 | | | nCZsaz.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\nqa | | False | 2 | | | -xbh.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\TED | | False | 2 | | | c-NsPy XFVlW3\-nOs.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\TED | | False | 2 | | | c-NsPy XFVlW3\AxTg6ai5-.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1SrgU\TED | | False | 2 | | | c-NsPy XFVlW3\Qz1seNiCHq4fY3oIJRd.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\82.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows NT\MSScan\WelcomeScan.j | | True | 1 | | | pg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\b | | False | 1 | | | rndlog.txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\Bears.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\Garden.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\GreenBubbles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\HandPrints.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\OrangeCircles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\Peacock.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\Roses.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\ShadesOfBlue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\SoftBlue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Statio | | False | 1 | | | nery\Stars.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Roaming\Microsoft\Windows\Themes\Tr | | False | 1 | | | anscodedWallpaper.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Internet Explore | | False | 1 | | | r\brndlog.txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\Bears.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\Garden.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\GreenBubbles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\HandPrints.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\OrangeCircles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\Peacock.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\Roses.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\ShadesOfBlue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\SoftBlue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows Mail\Sta | | False | 1 | | | tionery\Stars.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\D56IE.csv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\dX-rNSK.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\ir5GayTBg.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\MPX3V.xlsx | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\o7p_l.xls | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\OZQ_qXmBlgN17N.pdf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Themes | | False | 1 | | | \TranscodedWallpaper.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\113.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\114.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\115.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\116.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\117.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\118.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\119.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\120.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\121.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\122.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\123.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\124.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\125.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\126.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\127.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\128.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\129.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\130.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\131.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\132.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\133.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\134.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\135.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\136.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\137.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\138.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\139.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\140.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\141.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\142.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\143.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\144.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\145.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\146.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\147.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\148.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\149.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\55WOZ240.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\J5LNdpj\RElY_w0.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\J5LNdpj\txoKdckRvk.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\Jd8VsRICzqxDx9VoB\u0Low_3k9h1Go | | False | 1 | | | PY7.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\g7VbdhsAvPJRP7 | | False | 1 | | | \UvRcjVwuEV0RC6U9M.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\_2HZDo\SoyIwozbTZRKlfZgMav.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\Sample Pictures\Desert.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\Sample Pictures\Koala.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\BOOTSECT.BAK | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\165.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-4 | | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\background.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\166.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-4 | | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\device.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\167.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-4 | | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\overlay.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\168.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-4 | | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\superbar.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\169.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Device\{8702d817-5 | | True | 1 | | | aad-4674-9ef3-4d3decd87120}\background.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\170.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Device Stage\Device\{8702d817-5 | | True | 1 | | | aad-4674-9ef3-4d3decd87120}\watermark.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Search\Data\Applications\Window | | False | 1 | | | s\Windows.edb | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\guest.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\user.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\174.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile10.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\175.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile11.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\176.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile12.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\177.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile13.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\178.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile14.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\179.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile15.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\180.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile16.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\181.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile17.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\182.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile18.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\183.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile19.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\184.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile20.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\185.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile21.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\186.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile22.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\187.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile23.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\188.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile24.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\189.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile25.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\190.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile26.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\191.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile27.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\192.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile28.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\193.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile29.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\194.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile30.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\195.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile31.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\196.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile32.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\197.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile33.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\198.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile34.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\199.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile35.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\200.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile36.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\201.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile37.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\202.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile38.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\203.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile39.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\204.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile40.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\205.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile41.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\206.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile42.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\207.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile43.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\208.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\User Account Pictures\Default P | | True | 1 | | | ictures\usertile44.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Caches\cversions.2.db | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Caches\{67D69890-D853-4 | | False | 1 | | | 011-A87E-AA64FA83CE5A}.2.ver0x0000000000000002.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Caches\{6AF0698E-D558-4 | | False | 1 | | | F6E-9B3C-3716689AF493}.2.ver0x0000000000000004.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Caches\{6AF0698E-D558-4 | | False | 1 | | | F6E-9B3C-3716689AF493}.2.ver0x0000000000000005.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Caches\{6AF0698E-D558-4 | | False | 1 | | | F6E-9B3C-3716689AF493}.2.ver0x0000000000000006.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Caches\{6AF0698E-D558-4 | | False | 1 | | | F6E-9B3C-3716689AF493}.2.ver0x0000000000000007.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Caches\{7CD55808-3D38-4 | | False | 1 | | | DD5-90C9-62F0E6EE60D4}.2.ver0x0000000000000001.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Caches\{DDF571F2-BE98-4 | | False | 1 | | | 26D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 01.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 02.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 03.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 04.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 05.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 06.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 07.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 08.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 09.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows\Ringtones\Ringtone 10.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\227.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\All Users\Microsoft\Windows NT\MSFax\VirtualInbox\e | | True | 1 | | | n-US\WelcomeFax.tif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\IconCache.db | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\Explorer\th | | False | 1 | | | umbcache_256.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\Explorer\th | | False | 1 | | | umbcache_idx.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\IconCache.db | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Internet Explore | | False | 1 | | | r\brndlog.bak | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Caches\c | | False | 1 | | | versions.1.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Caches\{ | | False | 1 | | | AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000 | | | | | | f.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Caches\{ | | False | 1 | | | AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001 | | | | | | 0.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Explorer | | False | 1 | | | \thumbcache_256.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Explorer | | False | 1 | | | \thumbcache_32.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Explorer | | False | 1 | | | \thumbcache_96.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Explorer | | False | 1 | | | \thumbcache_idx.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\BP7n0_qwTWKOrxG.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\bywI0QluWl3W9BuD5f3o.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\daYIJ9-o1e8.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\dHLstwcTU20.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\DjLKlpzvVty.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\dz0vPTP5oWvHzt.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\G2kjJOGGR_cGbs8B.flv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\g_IAP-Kg5-s.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\JQZjF0K.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\mHjvG24DoFM.pps | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Nrae.png | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\O8fcDDPBkgPE-.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\ojEfR7Lfa6sgoK2mjmm.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\oRFN2VwItjwW5.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\pH1dzO_.png | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\QQ1a2p8pIiy_eDbCLi.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Qwg2CVFqC9ez1jCA.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\RA-n6LUBAsx5.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\rjweM.avi | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\sH5E3mmJVUx.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\sL9eRsroH9ZEq.png | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\uAEbZGeiEGNeOdNlxnCN.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\uLTbJg f.pps | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\UYwbA9Uh15VMu3eTzhh-.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\VSm1crHDJX95VtWS.flv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\WGxrL2.odt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\XdSQx_wXF9K9q.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\xF1J6kjKtJPO ac8GR6.ots | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\zMeJ2xz6d3on_BH9Gk7G.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\269.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\270.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\271.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\272.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\273.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\274.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\275.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\276.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\277.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\278.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\279.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\280.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\281.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\282.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\283.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\284.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\285.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\286.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\287.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\288.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\289.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\290.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\291.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\292.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\293.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\294.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\295.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\296.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\297.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\298.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\299.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\300.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\301.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\302.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\303.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\304.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\305.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\306.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\307.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\308.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\309.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\310.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\311.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\312.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Windows\TEMP\313.WNCRYT | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\Dfkh.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\HMdiZtpptjk3.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\ZPtaBq.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\lk-VjLkc3MbXEBkRaUk.wa | | False | 1 | | | v | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\fqNE\9 bXR.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\fqNE\bm1Lj1elmAHV.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\fqNE\HwQ_e63AiB.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\fqNE\QnI_.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\fqNE\ZhvacU3ZM4Pi0LqV. | | False | 1 | | | mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\gzfr8pq\0qrD5fx.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\gzfr8pq\VoX09UMk.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\2REugW.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\4SArhcVJd04q.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\9z_EhnKs.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\c5aLotv4.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\KFqjLmneLQ.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\MLX4g8dG4DbCwaO4. | | False | 1 | | | wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\0-sD9L8U\dJI4emFC | | False | 1 | | | XZ9.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\r4lSao\CsXH-DP0PZ | | False | 1 | | | vfbFnND.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\ZHuw0MA_qHQt\gi9i | | False | 1 | | | P_Csel.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\ZHuw0MA_qHQt\S9_2 | | False | 1 | | | q.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\ZHuw0MA_qHQt\xYSC | | False | 1 | | | fW4.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\aicIrCK.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\DRbA.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\eSZy HkfDwfx0.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\ImjWbTSsHXgLoI.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\n5VvG0H1npv.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\PWVh0SXS 4U.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\R9TluytrYPiqhwf.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\_y79.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\J5LNdpj\5HE-Bihy791Udb060Xb.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\J5LNdpj\JGg9PIy6C.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\Jd8VsRICzqxDx9VoB\4r2l.png | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\Jd8VsRICzqxDx9VoB\wOSCtyoZYGI-. | | False | 1 | | | png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\d0iFK_s5CqBrv.png | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\H PgOrP n6U.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\RgfJLX032Dp7.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\wU4tbYKXF6k0p.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\xqJ6Y5VSD79YpDJYjlfN.p | | False | 1 | | | ng | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\ZLPVbNiTdRC.png | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\_nMLiCbF8J8NqYjJ7Kp.bm | | False | 1 | | | p | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\2BzR.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\kHl4eGo4d 5rt4 | | False | 1 | | | l.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\SPxsPLGrT3P.pn | | False | 1 | | | g | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\xYz8CE1lhaIMq. | | False | 1 | | | gif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\BhbsuWYvu\AWko | | False | 1 | | | RjfJ_tBWlBiOWT.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\BhbsuWYvu\MNu7 | | False | 1 | | | K.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\BhbsuWYvu\OxDt | | False | 1 | | | .png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\g7VbdhsAvPJRP7 | | False | 1 | | | \MHaNQ6MS_JZ SSx.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\_2HZDo\8R-qYt.png | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\_2HZDo\DDw1j2dVM.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\_2HZDo\EhTgSX0.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\_2HZDo\OIpUtXJ.png | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Pictures\_2HZDo\WXqSaaQ6I.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\0rT9N7WaqqVk6-S.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\GLS-An3bnb6SU.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\Hi-kH7N3AmaCgd.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\OUvp28f9EWMI29.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\RLH2Om7HScEO6PZume.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\Fxinkj5Qtq47dCBmWz\676ht6Zbx.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\Fxinkj5Qtq47dCBmWz\929sjpu-xRkJ3e | | False | 1 | | | 1T9j7.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\Fxinkj5Qtq47dCBmWz\BCyq1.flv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\Fxinkj5Qtq47dCBmWz\hvE _FFgg.avi | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\Fxinkj5Qtq47dCBmWz\OiA-6xvKP.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\Fxinkj5Qtq47dCBmWz\Peij538fk.mp4 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\haKYSLTY-M-z9\2IW7K-.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\haKYSLTY-M-z9\KdlAZanuXNJLG4yRHVf | | False | 1 | | | q.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\haKYSLTY-M-z9\L1FQ7B itpWHHcdAB05 | | False | 1 | | | U.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\haKYSLTY-M-z9\lhHBjhEVI.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\haKYSLTY-M-z9\MILwbJ.flv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\haKYSLTY-M-z9\mR1eX3.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\haKYSLTY-M-z9\Vc2CL4ln.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\4OJ9yfl3dn.flv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\AgmTJGfX.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\hSBc.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\hwJ0zzo_R1Q_PFff2.a | | False | 1 | | | vi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\kJ9Gatk fbtMTZAT.sw | | False | 1 | | | f | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\nbuAOs9o4ZD04F6rVgQ | | False | 1 | | | y.swf | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\RH6X.mp4 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\_AkUOD4i4xU431o1MVn | | False | 1 | | | E.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\GDHhHwNB.flv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\t0_1iokBD.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\VbvvVVB4I.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\YdjJQOANi2heTy | | False | 1 | | | 5E.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\eWpNrtKDx2ttVn | | False | 1 | | | FQ8J\87xpzn.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\eWpNrtKDx2ttVn | | False | 1 | | | FQ8J\dd3QogjnlSGKG1--_VS.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\eWpNrtKDx2ttVn | | False | 1 | | | FQ8J\dJQC-.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\eWpNrtKDx2ttVn | | False | 1 | | | FQ8J\imMDTkS6K.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\eWpNrtKDx2ttVn | | False | 1 | | | FQ8J\osbg1M5t.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\eWpNrtKDx2ttVn | | False | 1 | | | FQ8J\qa9nXIo402_he z.swf | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Music\Sample Music\Kalimba.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair | | False | 1 | | | .mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Music\Sample Music\Sleep Away.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Public\Videos\Sample Videos\Wildlife.wmv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\autoexec.bat | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\Explorer\th | | False | 1 | | | umbcache_1024.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\Explorer\th | | False | 1 | | | umbcache_32.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\Explorer\th | | False | 1 | | | umbcache_96.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\Default\AppData\Local\Microsoft\Windows\Explorer\th | | False | 1 | | | umbcache_sr.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Explorer | | False | 1 | | | \thumbcache_1024.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\Explorer | | False | 1 | | | \thumbcache_sr.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Cookie | | False | 1 | | | s\Low\dssdpmx042@google[2].txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Cookie | | False | 1 | | | s\Low\dssdpmx042@java[1].txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | find | C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows\Cookie | | False | 1 | | | s\Low\dssdpmx042@oracle.112.2o7[2].txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\b.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\c.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_bulgarian.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_chinese (simplified). | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | wnry | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_chinese (traditional) | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | .wnry | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_croatian.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_czech.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_danish.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_dutch.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_english.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_filipino.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_finnish.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_french.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_german.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_greek.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_indonesian.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_italian.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_japanese.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_korean.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_latvian.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_norwegian.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_polish.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_portuguese.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_romanian.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_russian.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_slovak.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_spanish.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_swedish.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_turkish.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\msg\m_vietnamese.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\r.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\s.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\t.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\taskdl.exe | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\taskse.exe | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\u.wnry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_ARCHIVE | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\c.wnry | file_attributes = _O_RDONLY | _O_BINARY | True | 3 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\c.wnry | file_attributes = _O_WRONLY | _O_BINARY | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\t.wnry | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\00000000.pky | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | False | 1 | | | | create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\00000000.pky | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\00000000.eky | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , create_disposition = OPEN_ALWAYS, file_attributes = FILE_A | | | | | | TTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\00000000.pky | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 2 | | | | create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\00000000.res | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | False | 1 | | | | create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\00000000.res | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 10 | | | | , create_disposition = OPEN_ALWAYS, file_attributes = FILE_A | | | | | | TTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\29121494860050.bat | file_attributes = _O_WRONLY | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\r.wnry | file_attributes = _O_RDONLY | _O_BINARY | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\@please_read_me@.txt | file_attributes = _O_WRONLY | _O_BINARY | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\desktop\~sd927e.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default user\desktop\~sd92dd.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\~sd92ed.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\bibagpmyuse2qjdfr.jpg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\bibagpmyuse2qjdfr.jpg.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\bibagpmyuse2qjdfr.jpg | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\h yrmf.docx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\h yrmf.docx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\h yrmf.docx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\hwef8jg56gk9dlonf.csv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\hwef8jg56gk9dlonf.csv.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\hwef8jg56gk9dlonf.csv | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2bnrt.xlsx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2bnrt.xlsx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2bnrt.xlsx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\qb17mfblutnx_jw3.jpg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\qb17mfblutnx_jw3.jpg.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\qb17mfblutnx_jw3.jpg | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\xirvpsv.pptx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\xirvpsv.pptx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\xirvpsv.pptx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\z89la7110x3isdf6.doc | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\z89la7110x3isdf6.doc.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\z89la7110x3isdf6.doc | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\~sd9761.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\6pkpcf4uawt | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | zg4xqlmdz.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\6pkpcf4uawt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | zg4xqlmdz.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\6pkpcf4uawt | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | zg4xqlmdz.jpg | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\~sd9 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 7c0.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \~sd983e.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ysj1\~sd98ac.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ysj1\2tpofaj-rucn\~sd98dc.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\3kmod_2d6ued.swf | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\3kmod_2d6ued.swf.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\3kmod_2d6ued.swf | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\acndlsz4zhbdyziqkotj.mp3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\acndlsz4zhbdyziqkotj.mp3.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\acndlsz4zhbdyziqkotj.mp3 | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\ajkh5gnvfe8rqzavym.png | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\ajkh5gnvfe8rqzavym.png.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\ajkh5gnvfe8rqzavym.png | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\blw7.png | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\blw7.png.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\blw7.png | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\c9dt7ht6ochw_r.flv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\c9dt7ht6ochw_r.flv.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\c9dt7ht6ochw_r.flv | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\fycbs5cumf6dh_fs.ods | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\fycbs5cumf6dh_fs.ods.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\fycbs5cumf6dh_fs.ods | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\gfs3quzvztmy-jq6xox.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\gfs3quzvztmy-jq6xox.bmp.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\gfs3quzvztmy-jq6xox.bmp | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\h4mzf.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\h4mzf.bmp.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\h4mzf.bmp | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\hyxaas7ppqlngg5ir6.mp4 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\hyxaas7ppqlngg5ir6.mp4.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\hyxaas7ppqlngg5ir6.mp4 | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\kit3qjluq u1ehoy.wav | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\kit3qjluq u1ehoy.wav.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\kit3qjluq u1ehoy.wav | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\lkwb.wav | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\lkwb.wav.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\lkwb.wav | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\m-flkfw.pps | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\m-flkfw.pps.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\m-flkfw.pps | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\p6tg4g.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\p6tg4g.bmp.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\p6tg4g.bmp | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\ytaj9x8n5wxojmujtmi.gif | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\ytaj9x8n5wxojmujtmi.gif.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\ytaj9x8n5wxojmujtmi.gif | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\zb1nbq.mp4 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\zb1nbq.mp4.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\zb1nbq.mp4 | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\zu3ocp3f88cn.flv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\zu3ocp3f88cn.flv.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\zu3ocp3f88cn.flv | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\- jmajpm5_r | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ro.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\- jmajpm5_r | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ro.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\- jmajpm5_r | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | ro.bmp | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\mf1nbo.swf | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\mf1nbo.swf. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\mf1nbo.swf | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ksln | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | i5puyuj.flv | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ksln | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | i5puyuj.flv.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ksln | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | i5puyuj.flv | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ntjk | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | r9csa.mp4 | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ntjk | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | r9csa.mp4.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ntjk | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | r9csa.mp4 | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\nxds | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | miu.odp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\nxds | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | miu.odp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\nxds | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | miu.odp | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | \2h9gjyzxutjtaj vlt76.ods | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \2h9gjyzxutjtaj vlt76.ods.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | \2h9gjyzxutjtaj vlt76.ods | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | \9wcvzyuqncphgsqczkn.png | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \9wcvzyuqncphgsqczkn.png.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | \9wcvzyuqncphgsqczkn.png | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | \kpyogarb2ozckx549d.flv | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \kpyogarb2ozckx549d.flv.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | \kpyogarb2ozckx549d.flv | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | \z8mf4.avi | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \z8mf4.avi.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | \z8mf4.avi | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ysj1\tey_zyonktol5ojrt0io.mp4 | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ysj1\tey_zyonktol5ojrt0io.mp4.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | ysj1\tey_zyonktol5ojrt0io.mp4 | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3 | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\programdata\qxtqusdnjzrizx418\f.wnry | | True | 3 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3 | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ysj1\2tpofaj-rucn\93pm.gif | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ysj1\2tpofaj-rucn\93pm.gif.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | ysj1\2tpofaj-rucn\93pm.gif | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ysj1\2tpofaj-rucn\cxy8v.mp4 | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ysj1\2tpofaj-rucn\cxy8v.mp4.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | ysj1\2tpofaj-rucn\cxy8v.mp4 | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bmp | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ysj1\2tpofaj-rucn\yg84pi.avi | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ysj1\2tpofaj-rucn\yg84pi.avi.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | ysj1\2tpofaj-rucn\yg84pi.avi | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ysj1\2tpofaj-rucn\yoo37jp7q.wav | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ysj1\2tpofaj-rucn\yoo37jp7q.wav.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | ysj1\2tpofaj-rucn\yoo37jp7q.wav | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\desktop\~sda1e1.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\documents\~sda433.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default user\documents\~sda444.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\~sda493.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\5dwumhpov0ond.doc | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\5dwumhpov0ond.doc.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\5dwumhpov0ond.doc | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\5pfcgtj7-40fzu.docx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\5pfcgtj7-40fzu.docx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\5pfcgtj7-40fzu.docx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\9c54.docx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\9c54.docx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\9c54.docx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\axmcb.docx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\axmcb.docx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\axmcb.docx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\f8t0d1hl8mulgw0ye.pptx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\f8t0d1hl8mulgw0ye.pptx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\f8t0d1hl8mulgw0ye.pptx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\g9fp hftlrgz5w.xls | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\g9fp hftlrgz5w.xls.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\g9fp hftlrgz5w.xls | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\gmphr0w6rrpdhpbef.csv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\gmphr0w6rrpdhpbef.csv.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\gmphr0w6rrpdhpbef.csv | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\gpimnirm chkjuih.xlsx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\gpimnirm chkjuih.xlsx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\gpimnirm chkjuih.xlsx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\hemk7ngcvjguirn6.xlsx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\hemk7ngcvjguirn6.xlsx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\hemk7ngcvjguirn6.xlsx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\kqsfgiuuv7macle5kbe.pptx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\kqsfgiuuv7macle5kbe.pptx.wncry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | t | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\kqsfgiuuv7macle5kbe.pptx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\lsifcdcb6tbfbadh2jc.pptx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\lsifcdcb6tbfbadh2jc.pptx.wncry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | t | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\lsifcdcb6tbfbadh2jc.pptx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\lu6w3pxpu3ca.xlsx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\lu6w3pxpu3ca.xlsx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\lu6w3pxpu3ca.xlsx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\ly7o.pptx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\ly7o.pptx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\ly7o.pptx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\qocbs.docx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\qocbs.docx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\qocbs.docx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\tcrd9un1_myjq-.pptx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\tcrd9un1_myjq-.pptx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\tcrd9un1_myjq-.pptx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\wv7vnssgbfodzvw.xlsx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\wv7vnssgbfodzvw.xlsx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\wv7vnssgbfodzvw.xlsx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\yzoy0uk.pptx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\yzoy0uk.pptx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\yzoy0uk.pptx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\zwklqrq2nlske44p.xlsx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\zwklqrq2nlske44p.xlsx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\zwklqrq2nlske44p.xlsx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\_xgwdcsgf mjc6 j.docx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\_xgwdcsgf mjc6 j.docx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\_xgwdcsgf mjc6 j.docx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\~sdb085.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\-nap.rtf | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\-nap.rtf.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\-nap.rtf | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\9o_u.pdf | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\9o_u.pdf.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\9o_u.pdf | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\k6fadynloup1zicvtg0o.xl | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | sx | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\k6fadynloup1zicvtg0o.xl | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | sx.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\k6fadynloup1zicvtg0o.xl | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | sx | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\p3k5i8nny2aq5c.pptx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\p3k5i8nny2aq5c.pptx.wnc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\p3k5i8nny2aq5c.pptx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\~sdb28 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 9.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\y5sy7w | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | jt_a7krqnidgx.xlsx | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\y5sy7w | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | jt_a7krqnidgx.xlsx.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\y5sy7w | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | jt_a7krqnidgx.xlsx | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ~sdb2f7.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | sbxkqajovxqwlt.csv | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | sbxkqajovxqwlt.csv.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | sbxkqajovxqwlt.csv | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\~sd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | b356.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\fxx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | fw-17sc6wh.ppt | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\fxx | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | fw-17sc6wh.ppt.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\fxx | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | fw-17sc6wh.ppt | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\vsh | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | y_qomhsb5w.ppt | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\vsh | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | y_qomhsb5w.ppt.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\vsh | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | y_qomhsb5w.ppt | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c-nspy xfvlw3\~sdb412.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | c-nspy xfvlw3\coafenjkmrn.xlsx | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c-nspy xfvlw3\coafenjkmrn.xlsx.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | c-nspy xfvlw3\coafenjkmrn.xlsx | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\kqu8ojbhlzr.odp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\kqu8ojbhlzr.odp.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\kqu8ojbhlzr.odp | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\qracrespejeu3.ods | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\qracrespejeu3.ods.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\qracrespejeu3.ods | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\t9kbu.ots | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\t9kbu.ots.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\t9kbu.ots | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\uigp.odp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\uigp.odp.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\uigp.odp | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\v3b5lp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | gbpfe06xmrqjo.ots | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\v3b5lp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | gbpfe06xmrqjo.ots.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\v3b5lp | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | gbpfe06xmrqjo.ots | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | k_5vq4jhsw8guvo.odp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | k_5vq4jhsw8guvo.odp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | k_5vq4jhsw8guvo.odp | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | qbqa9 xzsel7xnah8.pps | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | qbqa9 xzsel7xnah8.pps.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | qbqa9 xzsel7xnah8.pps | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\bzr | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | tj.pps | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\bzr | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tj.pps.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\bzr | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | tj.pps | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\lo4 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | nczsaz.ots | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\lo4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | nczsaz.ots.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\lo4 | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | nczsaz.ots | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\nqa | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | -xbh.odp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\nqa | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | -xbh.odp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\nqa | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | -xbh.odp | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | c-nspy xfvlw3\-nos.ods | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c-nspy xfvlw3\-nos.ods.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | c-nspy xfvlw3\-nos.ods | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | c-nspy xfvlw3\axtg6ai5-.ods | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c-nspy xfvlw3\axtg6ai5-.ods.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | c-nspy xfvlw3\axtg6ai5-.ods | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | c-nspy xfvlw3\qz1senichq4fy3oijrd.ots | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c-nspy xfvlw3\qz1senichq4fy3oijrd.ots.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | desired_access = GENERIC_WRITE, share_mode = FILE_SHARE_READ | True | 1 | | | c-nspy xfvlw3\qz1senichq4fy3oijrd.ots | , FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\documents\~sdb72f.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\~sdb73f.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\$recycle.bin\~sdb79e.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\$recycle.bin\s-1-5-21-3385616887-338319549-3229196192-100 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 0\~sdb79f.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\~sdb7bf.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\cs-cz\~sdb81e.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\da-dk\~sdb82e.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\de-de\~sdb84f.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\el-gr\~sdb85f.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\en-us\~sdb870.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\es-es\~sdb890.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\fi-fi\~sdb8b0.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\fonts\~sdb8e0.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\fr-fr\~sdb93f.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\hu-hu\~sdb95f.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\it-it\~sdb96f.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\ja-jp\~sdb980.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\ko-kr\~sdb991.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\nb-no\~sdb9a1.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\nl-nl\~sdb9b2.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\pl-pl\~sdb9c2.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\pt-br\~sdb9d3.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\pt-pt\~sdb9e4.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\ru-ru\~sdb9e5.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\sv-se\~sdb9f5.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\tr-tr\~sdb9f6.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\zh-cn\~sdba07.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\zh-hk\~sdba17.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\boot\zh-tw\~sdba18.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\perflogs\~sdba29.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\perflogs\admin\~sdba2a.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\recovery\~sdba2b.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\recovery\a8ef0822-7920-11e5-85b1-fee83b99d226\~sdba3c.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\system volume information\~sdba4c.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\system volume information\spp\~sdba8c.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\system volume information\spp\onlinemetadatacache\~sdba9c | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | .tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\system volume information\spp\sppcbshivestore\~sdbaad.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\system volume information\spp\sppgroupcache\~sdbaae.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\~sdbabe.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\~sdbacf.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\~sdbaff.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\assistance\~sdbb2f.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\assistance\client\~sdbb30.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\assistance\client\1.0\~sdbb31.t | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | mp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\assistance\client\1.0\en-us\~sd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | bb41.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\crypto\~sdbb52.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\crypto\dss\~sdbb53.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\crypto\dss\machinekeys\~sdbb54. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\crypto\keys\~sdbb64.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\crypto\rsa\~sdbb65.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\crypto\rsa\machinekeys\~sdbb66. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\crypto\rsa\s-1-5-18\~sdbb77.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\~sdbb78.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\device\~sdbb89.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\device\{113527a4-4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\~sdbb8a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\device\{8702d817-5 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | aad-4674-9ef3-4d3decd87120}\~sdbb9a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\task\~sdbb9b.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\task\{07deb856-fc6 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | e-4fb9-8add-d8f2cf8722c9}\~sdbb9c.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\task\{07deb856-fc6 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | e-4fb9-8add-d8f2cf8722c9}\en-us\~sdbbad.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\task\{e35be42d-f74 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 2-4d96-a50a-1775fb1a7a42}\~sdbbae.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\task\{e35be42d-f74 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 2-4d96-a50a-1775fb1a7a42}\en-us\~sdbbbe.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\devicesync\~sdbbcf.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\drm\~sdbbd0.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\drm\server\~sdbbe1.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\ehome\~sdbbe2.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\ehome\logs\~sdbbe3.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\event viewer\~sdbbe4.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\event viewer\views\~sdbbf4.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\event viewer\views\applicationv | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | iewsrootnode\~sdbbf5.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\identitycrl\~sdbbf6.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\media player\~sdbc07.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\mf\~sdbc08.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\network\~sdbc09.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\network\connections\~sdbc0a.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\network\downloader\~sdbc59.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\rac\~sdbc5a.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\rac\outbound\~sdbc6a.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\rac\publisheddata\~sdbc7b.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\rac\statedata\~sdbc7c.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\rac\temp\~sdbc7d.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\search\~sdbc7e.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\search\data\~sdbc8f.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\search\data\applications\~sdbc9 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 0.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\search\data\applications\window | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\~sdbca0.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\search\data\applications\window | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\config\~sdbca1.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\search\data\applications\window | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\gatherlogs\~sdbca2.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\search\data\applications\window | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\gatherlogs\systemindex\~sdbcb3.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\search\data\applications\window | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\projects\~sdbcb4.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\search\data\applications\window | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\projects\systemindex\~sdbcb5.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\search\data\applications\window | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\projects\systemindex\indexer\~sdbcb6.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\search\data\applications\window | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\projects\systemindex\indexer\cifiles\~sdbcb7.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\search\data\applications\window | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\projects\systemindex\propmap\~sdbcb8.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\search\data\applications\window | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\projects\systemindex\secstore\~sdbcb9.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\search\data\temp\~sdbcba.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\~sdbcbb.t | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | mp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\~sdbccb.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\vault\~sdbcdc.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\~sdbcdd.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ait\~sdbcde.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\caches\~sdbcef.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\devicemetadatastore\~sd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | bcf0.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\devicemetadatastore\en- | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | us\~sdbd00.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\drm\~sdbd11.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\drm\cache\~sdbd12.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\gameexplorer\~sdbd13.tm | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | p | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\power efficiency diagno | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | stics\~sdbd23.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\~sdbd24.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\sqm\~sdbd45.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\sqm\manifest\~sdbd55.tm | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | p | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\sqm\sessions\~sdbd56.tm | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | p | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\sqm\upload\~sdbd57.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\start menu\~sdbd58.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\start menu\programs\~sd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | bd78.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\start menu\programs\acc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | essories\~sdbd79.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\start menu\programs\acc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | essories\accessibility\~sdbd8a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\start menu\programs\acc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | essories\system tools\~sdbd9b.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\start menu\programs\acc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | essories\tablet pc\~sdbd9c.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\start menu\programs\acc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | essories\windows powershell\~sdbdac.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\start menu\programs\adm | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | inistrative tools\~sdbdad.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\start menu\programs\gam | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | es\~sdbdae.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\start menu\programs\jav | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | a\~sdbdbf.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\start menu\programs\mai | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ntenance\~sdbdc0.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\start menu\programs\sta | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | rtup\~sdbe3e.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\start menu\programs\tab | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | let pc\~sdbe3f.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\templates\~sdbe4f.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\wer\~sdbe50.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\wer\reportarchive\~sdbe | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 61.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\wer\reportarchive\noncr | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | itical_x86_38e744f5ed92b6643d4610f93acebec71c7d44_03443294\~ | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | | | sdbe62.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\wer\reportarchive\noncr | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | itical_x86_5164e364f554d49c65173057b5da44f5956558a_03444874\ | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | | | ~sdbe63.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\wer\reportarchive\noncr | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | itical_x86_7125ba86c55facb797ac343822852efc7fde5bb0_03681e87 | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | | | \~sdbe64.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\wer\reportqueue\~sdbe74 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | .tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\~sdbe85.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\definition upd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ates\~sdbe86.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\definition upd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ates\backup\~sdbe97.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\definition upd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ates\updates\~sdbe98.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\definition upd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ates\{21833c5a-be0d-427d-b68e-efa18747b9cf}\~sdbeb8.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\localcopy\~sdb | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | eb9.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\quarantine\~sd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | bec9.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\scans\~sdbeca. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\scans\cleansto | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | re\~sdbedb.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\scans\cleansto | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | re\entries\~sdbefb.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\scans\cleansto | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | re\resourcedata\~sdbefc.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\scans\cleansto | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | re\resources\~sdbf0d.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\scans\history\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ~sdbf0e.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\scans\history\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | cachemanager\~sdbf0f.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\scans\history\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | results\~sdbf1f.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\scans\history\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | results\resource\~sdbf20.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\scans\history\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | service\~sdbf41.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\scans\history\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | store\~sdbf42.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows defender\support\~sdbf4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 3.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows nt\~sdbf53.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows nt\msfax\~sdbf64.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows nt\msfax\activitylog\~s | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | dbf65.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows nt\msfax\common coverpa | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ges\~sdbf75.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows nt\msfax\common coverpa | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ges\en-us\~sdbf86.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows nt\msfax\inbox\~sdbf87. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows nt\msfax\queue\~sdbf88. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows nt\msfax\sentitems\~sdb | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | f99.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\~ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | sdbf9a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\e | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | n-us\~sdbf9b.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows nt\msscan\~sdbfab.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows nt\msscan\welcomescan.j | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | pg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows nt\msscan\welcomescan.j | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | pg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\wwansvc\~sdc048.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\wwansvc\profiles\~sdc049.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | False | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\mozilla\~sdc0c7.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\mozilla\logs\~sdc0c8.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\oracle\~sdc0d9.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\oracle\java\~sdc0da.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\oracle\java\.oracle_jre_usage\~sdc0ea.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\oracle\java\installcache\~sdc0eb.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\oracle\java\javapath\~sdc0ec.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\~sdc0fd.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\d4036846864773e3d647f421dfe | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 7f6ca536e307b\~sdc11d.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\d4036846864773e3d647f421dfe | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 7f6ca536e307b\packages\~sdc11e.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\d4036846864773e3d647f421dfe | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 7f6ca536e307b\packages\patch\~sdc11f.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\d4036846864773e3d647f421dfe | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 7f6ca536e307b\packages\patch\x86\~sdc13f.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{13a4ee12-23ea-3371-91ee-ef | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | b36ddfff3e}v12.0.21005\~sdc140.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{13a4ee12-23ea-3371-91ee-ef | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | b36ddfff3e}v12.0.21005\packages\~sdc151.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{13a4ee12-23ea-3371-91ee-ef | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | b36ddfff3e}v12.0.21005\packages\vcruntimeminimum_x86\~sdc152 | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | | | .tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{33d1fd90-4274-48a1-9bc1-97 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | e33d9c2d6f}\~sdc153.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{74d0e5db-b326-4dae-a6b2-44 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 5b9de1836e}\~sdc154.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{a2563e55-3bec-3828-8d67-e5 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | e8b9e8b675}v14.0.23026\~sdc164.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{a2563e55-3bec-3828-8d67-e5 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | e8b9e8b675}v14.0.23026\packages\~sdc175.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{a2563e55-3bec-3828-8d67-e5 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | e8b9e8b675}v14.0.23026\packages\vcruntimeminimum_x86\~sdc176 | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | | | .tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{b175520c-86a2-35a7-8619-86 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | dc379688b9}v11.0.61030\~sdc177.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{b175520c-86a2-35a7-8619-86 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | dc379688b9}v11.0.61030\packages\~sdc188.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{b175520c-86a2-35a7-8619-86 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | dc379688b9}v11.0.61030\packages\vcruntimeadditional_x86\~sdc | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | | | 189.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{bd95a8cd-1d9f-35ad-981a-3e | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 7925026ebb}v11.0.61030\~sdc18a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{bd95a8cd-1d9f-35ad-981a-3e | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 7925026ebb}v11.0.61030\packages\~sdc18b.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{bd95a8cd-1d9f-35ad-981a-3e | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 7925026ebb}v11.0.61030\packages\vcruntimeminimum_x86\~sdc18c | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | | | .tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{be960c1c-7bad-3de6-8b1a-26 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 16fe532845}v14.0.23026\~sdc19c.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{be960c1c-7bad-3de6-8b1a-26 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 16fe532845}v14.0.23026\packages\~sdc19d.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{be960c1c-7bad-3de6-8b1a-26 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 16fe532845}v14.0.23026\packages\vcruntimeadditional_x86\~sdc | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | | | 19e.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{e6e75766-da0f-4ba2-9788-6e | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | a593ce702d}\~sdc1af.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{f8cfeb22-a2e7-3971-9eda-4b | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 11edefc185}v12.0.21005\~sdc1b0.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{f8cfeb22-a2e7-3971-9eda-4b | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 11edefc185}v12.0.21005\packages\~sdc1b1.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\package cache\{f8cfeb22-a2e7-3971-9eda-4b | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 11edefc185}v12.0.21005\packages\vcruntimeadditional_x86\~sdc | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | | | 1c1.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\qxtqusdnjzrizx418\~sdc1c2.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\qxtqusdnjzrizx418\msg\~sdc1c3.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\~sdc1d4.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\~sdc1f4.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\~sdc1f5.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\~sdc206.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\credentials\~sdc236 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | .tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\feeds\~sdc237.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\feeds\microsoft fee | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ds~\~sdc247.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\feeds\{5588acfd-643 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 6-411b-a5ce-666ae6a92d3d}~\~sdc258.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\feeds\{5588acfd-643 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 6-411b-a5ce-666ae6a92d3d}~\webslices~\~sdc259.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\feeds cache\~sdc25a | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | .tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\feeds cache\4cssrv0 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 0\~sdc26a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\feeds cache\dt1gie4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | d\~sdc26b.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\feeds cache\f6gei81 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | z\~sdc27c.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\feeds cache\gxo2h2p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | j\~sdc27d.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\internet explorer\~ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | sdc27e.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\internet explorer\b | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | rndlog.txt | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\internet explorer\b | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | rndlog.txt.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\media player\~sdc29 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | e.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\media player\sync p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | laylists\~sdc29f.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\media player\sync p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | laylists\en-us\~sdc2a0.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\media player\sync p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | laylists\en-us\0000fdbe\~sdc2b1.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\~sdc2c1.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\burn\~sdc2d | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 2.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\burn\burn\~ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | sdc2d3.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\caches\~sdc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 2d4.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\explorer\~s | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | dc2d5.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\gameexplore | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | r\~sdc2e6.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\history\~sd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c2e7.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\history\his | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tory.ie5\~sdc2f7.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\history\low | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \~sdc2f8.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\ringtones\~ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | sdc2f9.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\wer\~sdc30a | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | .tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\wer\erc\~sd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c30b.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\wer\reporta | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | rchive\~sdc30c.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\~sdc31 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\backup | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \~sdc31d.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\backup | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \new\~sdc32e.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | nery\~sdc33f.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | nery\bears.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | nery\bears.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | nery\garden.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | nery\garden.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | nery\greenbubbles.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | nery\greenbubbles.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | nery\handprints.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | nery\handprints.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | nery\orangecircles.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | nery\orangecircles.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | nery\peacock.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | nery\peacock.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | nery\roses.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | nery\roses.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | nery\shadesofblue.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | nery\shadesofblue.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | nery\softblue.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | nery\softblue.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | nery\stars.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows mail\statio | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | nery\stars.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows media\~sdc3 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | bc.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows media\12.0\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ~sdc3ec.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows sidebar\~sd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c3ed.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows sidebar\gad | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | gets\~sdc3ee.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\locallow\~sdc3ef.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\~sdc40f.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\identities\~sdc410.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\identities\{b85dca4a-5c21-4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ec5-af48-a2a88cd3d1d9}\~sdc411.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\~sdc422.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\credentials\~sdc4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 23.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\crypto\~sdc434.tm | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | p | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\crypto\rsa\~sdc44 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 4.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\internet explorer | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \~sdc445.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\internet explorer | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \quick launch\~sdc456.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\internet explorer | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \quick launch\user pinned\~sdc457.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\internet explorer | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \quick launch\user pinned\implicitappshortcuts\~sdc467.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\internet explorer | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \quick launch\user pinned\taskbar\~sdc478.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\protect\~sdc489.t | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | mp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\protect\s-1-5-21- | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 892523515-1518344882-2423736544-500\~sdc48a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\systemcertificate | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\~sdc49a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\systemcertificate | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\my\~sdc49b.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\systemcertificate | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\my\certificates\~sdc4ac.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\systemcertificate | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\my\crls\~sdc4ad.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\systemcertificate | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\my\ctls\~sdc4ae.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\~sdc4be.t | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | mp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\cookies\~ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | sdc4cf.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\iecompatc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ache\~sdc4d0.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\iecompatc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ache\low\~sdc4e1.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\ietldcach | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | e\~sdc4e2.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\ietldcach | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | e\low\~sdc4e3.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\libraries | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \~sdc4e4.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\network s | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | hortcuts\~sdc4f4.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\printer s | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | hortcuts\~sdc4f5.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\privacie\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ~sdc4f6.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\privacie\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | low\~sdc507.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\recent\~s | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | dc508.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\recent\au | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tomaticdestinations\~sdc509.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\recent\cu | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | stomdestinations\~sdc50a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\sendto\~s | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | dc51a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\start men | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | u\~sdc51b.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\start men | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | u\programs\~sdc52c.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\start men | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | u\programs\accessories\~sdc53d.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\start men | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | u\programs\accessories\accessibility\~sdc53e.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\start men | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | u\programs\accessories\system tools\~sdc54e.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\start men | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | u\programs\administrative tools\~sdc55f.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\start men | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | u\programs\maintenance\~sdc560.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\start men | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | u\programs\startup\~sdc561.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\templates | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \~sdc562.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\themes\~s | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | dc563.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\themes\tr | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | anscodedwallpaper.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\roaming\microsoft\windows\themes\tr | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | anscodedwallpaper.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\contacts\~sdc5e1.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\desktop\~sdc5f1.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\documents\~sdc5f2.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\downloads\~sdc612.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\favorites\~sdc623.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\favorites\links\~sdc643.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\favorites\microsoft websites\~sdc654.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\favorites\msn websites\~sdc664.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\favorites\windows live\~sdc740.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\links\~sdc760.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\music\~sdc790.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\pictures\~sdc791.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\saved games\~sdc7a1.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\searches\~sdc7a2.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\videos\~sdc7b3.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\~sdc7b4.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\~sdc7e4.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\~sdc7f4.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\google\~sdc815.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\google\crashreports\~sdc81 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 6.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\~sdc817.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\credentials\~sdc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 827.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\event viewer\~sd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c838.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\feeds\~sdc839.tm | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | p | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\feeds\microsoft | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | feeds~\~sdc849.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\feeds\{5588acfd- | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 6436-411b-a5ce-666ae6a92d3d}~\~sdc85a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\feeds\{5588acfd- | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 6436-411b-a5ce-666ae6a92d3d}~\webslices~\~sdc86b.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\feeds cache\~sdc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 86c.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\feeds cache\4css | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | rv00\~sdc87c.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\feeds cache\dt1g | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ie4d\~sdc87d.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\feeds cache\f6ge | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | i81z\~sdc87e.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\feeds cache\gxo2 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | h2pj\~sdc87f.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | r\~sdc890.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | r\brndlog.txt | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | r\brndlog.txt.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | r\recovery\~sdc8a0.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | r\recovery\active\~sdc8b1.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | r\recovery\last active\~sdc93e.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\media player\~sd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c94f.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\media player\syn | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c playlists\~sdc950.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\media player\syn | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c playlists\en-us\~sdc961.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\media player\syn | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c playlists\en-us\0000cd9a\~sdc962.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\media player\syn | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c playlists\en-us\0000fdbe\~sdc972.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\taskschedulercon | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | fig\~sdc983.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\~sdc984. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\1033\~sd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c994.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\burn\~sd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c995.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\burn\bur | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | n\~sdc996.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\burn\bur | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | n1\~sdc9a7.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\~ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | sdc9a8.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \~sdc9a9.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\gameexpl | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | orer\~sdc9ba.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ~sdc9bb.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | history.ie5\~sdc9cb.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | history.ie5\mshist012017051520170516\~sdc9cc.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | low\~sdc9cd.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | low\history.ie5\~sdc9de.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | low\history.ie5\mshist012016110220161103\~sdc9ee.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\ringtone | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\~sdc9ef.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\themes\~ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | sdc9f0.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\wer\~sdc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | a01.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\wer\erc\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ~sdca02.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\wer\repo | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | rtarchive\~sdca03.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\wer\repo | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | rtqueue\~sdca14.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\~sd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ca15.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\bac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | kup\~sdca25.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\bac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | kup\new\~sdca26.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tionery\~sdca27.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | tionery\bears.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tionery\bears.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | tionery\garden.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tionery\garden.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | tionery\greenbubbles.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tionery\greenbubbles.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | tionery\handprints.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tionery\handprints.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | tionery\orangecircles.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tionery\orangecircles.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | tionery\peacock.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tionery\peacock.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | tionery\roses.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tionery\roses.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | tionery\shadesofblue.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tionery\shadesofblue.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | tionery\softblue.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tionery\softblue.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | tionery\stars.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tionery\stars.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows media\~s | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | dcb22.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows media\12 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | .0\~sdcb23.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows sidebar\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ~sdcb24.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows sidebar\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | gadgets\~sdcb34.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\virtualstore\~sdcb35.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\~sdcb36.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\microsoft\~sdcb47.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\microsoft\cryptneturlca | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | che\~sdcb48.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\microsoft\cryptneturlca | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | che\content\~sdcb49.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\microsoft\cryptneturlca | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | che\metadata\~sdcb69.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | orer\~sdcb7a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | orer\domstore\~sdcb8a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | orer\domstore\1ppol5zc\~sdcbab.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | orer\domstore\68u8ihrk\~sdcbac.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | orer\domstore\b10w93nd\~sdcbad.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | orer\domstore\ls3151yd\~sdcbae.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | orer\services\~sdcbaf.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\~sdcbbf.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\~sdcbc0.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\~sd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | cbd1.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\~sdcbe1.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\~sdcbf2.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\0\~sdcc70.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\1\~sdcc80.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\10\~sdcc91.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\11\~sdcc92.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\12\~sdcc93.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\13\~sdcca4.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\14\~sdcca5.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\15\~sdcca6.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\16\~sdcca7.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\17\~sdccb7.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\18\~sdccb8.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\19\~sdccb9.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\2\~sdccca.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\20\~sdccda.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\21\~sdcceb.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\22\~sdcd0b.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\23\~sdcd0c.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\24\~sdcd1d.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\25\~sdcd1e.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\26\~sdcd1f.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\27\~sdcd20.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\28\~sdcd30.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\29\~sdcd31.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\3\~sdcd42.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\30\~sdcd43.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\31\~sdcd54.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\32\~sdcd55.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\33\~sdcd56.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\34\~sdcd66.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\35\~sdcd67.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\36\~sdcd68.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\37\~sdcd69.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\38\~sdcd6a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\39\~sdcd7b.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\4\~sdcd7c.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\40\~sdcd8c.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\41\~sdcd8d.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\42\~sdcd8e.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\43\~sdcd9f.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\44\~sdcda0.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\45\~sdcda1.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\46\~sdcda2.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\47\~sdcda3.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\48\~sdcdb4.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\49\~sdcdb5.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\5\~sdcdb6.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\50\~sdcdb7.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\51\~sdcdb8.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\52\~sdcdc8.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\53\~sdcdc9.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\54\~sdcdca.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\55\~sdcddb.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\56\~sdcddc.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\57\~sdcddd.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\58\~sdcdde.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\59\~sdcddf.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\6\~sdcdef.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\60\~sdce00.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\61\~sdce01.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\62\~sdce02.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\63\~sdce03.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\7\~sdce23.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\8\~sdce24.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\9\~sdce25.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\host\~sdce36.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\muffin\~sdce37.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\6.0\tmp\~sdce38.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | he\security\~sdce39.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\ext | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \~sdce3a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\log | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \~sdce3b.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\sec | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | urity\~sdce4b.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \~sdce4c.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \si\~sdce4d.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\~sdce4e.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\d56ie.csv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\d56ie.csv.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\dx-rnsk.jpg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\dx-rnsk.jpg.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\ir5gaytbg.jpg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\ir5gaytbg.jpg.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\mpx3v.xlsx | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\mpx3v.xlsx.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\o7p_l.xls | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\o7p_l.xls.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\ozq_qxmblgn17n.pdf | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\ozq_qxmblgn17n.pdf.wncry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | t | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\identities\~sdcf59.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\identities\{b85dca4a-5c2 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 1-4ec5-af48-a2a88cd3d1d9}\~sdcf5a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\~sdcf6a.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\credentials\~s | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | dcf6b.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\crypto\~sdcf7c | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | .tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\crypto\rsa\~sd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | cf7d.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\crypto\rsa\s-1 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | -5-21-3385616887-338319549-3229196192-1000\~sdcf8d.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\internet explo | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | rer\~sdcf8e.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\internet explo | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | rer\quick launch\~sdcf8f.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\internet explo | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | rer\quick launch\user pinned\~sdcfa0.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\internet explo | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | rer\quick launch\user pinned\implicitappshortcuts\~sdcfb1.tm | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | | | p | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\internet explo | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | rer\quick launch\user pinned\taskbar\~sdcfb2.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\mmc\~sdcfc2.tm | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | p | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\network\~sdcfd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 3.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\network\connec | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tions\~sdcfd4.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\network\connec | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tions\pbk\~sdcfd5.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\network\connec | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tions\pbk\_hiddenpbk\~sdcfd6.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\protect\~sdcfe | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 6.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\protect\s-1-5- | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 21-3385616887-338319549-3229196192-1000\~sdcfe7.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\protect\s-1-5- | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 21-892523515-1518344882-2423736544-500\~sdcff8.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\systemcertific | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ates\~sdcff9.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\systemcertific | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ates\my\~sdcffa.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\systemcertific | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ates\my\certificates\~sdd087.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\systemcertific | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ates\my\crls\~sdd088.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\systemcertific | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ates\my\ctls\~sdd0e7.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\~sdd0e | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 8.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\~sdd166.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\low\~sdd176.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\iecomp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | atcache\~sdd177.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\iecomp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | atcache\low\~sdd178.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\ietldc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ache\~sdd189.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\ietldc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ache\low\~sdd18a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\librar | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ies\~sdd18b.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\networ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | k shortcuts\~sdd19c.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\printe | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | r shortcuts\~sdd1ac.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\privac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ie\~sdd1ad.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\privac | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ie\low\~sdd1be.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\recent | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \~sdd1bf.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\recent | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \automaticdestinations\~sdd25c.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\recent | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \customdestinations\~sdd26c.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\sendto | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \~sdd26d.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | menu\~sdd26e.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | menu\programs\~sdd27f.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | menu\programs\accessories\~sdd290.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | menu\programs\accessories\accessibility\~sdd2a0.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | menu\programs\accessories\system tools\~sdd2a1.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | menu\programs\administrative tools\~sdd2a2.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | menu\programs\maintenance\~sdd2a3.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | menu\programs\startup\~sdd2c3.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\templa | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tes\~sdd2c4.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\themes | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \~sdd2c5.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\themes | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | \transcodedwallpaper.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\themes | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \transcodedwallpaper.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\sun\~sdd334.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\sun\java\~sdd344.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\sun\java\deployment\~sdd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 355.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\contacts\~sdd356.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\~sdd357.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\~sdd396.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\~sdd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 3a7.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \~sdd3b7.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ysj1\~sdd3c8.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ysj1\2tpofaj-rucn\~sdd3d9.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\~sdd3f9.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\~sdd438.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\~sdd44 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 9.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ~sdd459.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\~sd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | d46a.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | c-nspy xfvlw3\~sdd47b.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\downloads\~sdd47c.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\favorites\~sdd48c.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\favorites\links\~sdd49d.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\favorites\microsoft websites\~sdd49e.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\favorites\msn websites\~sdd4ae.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\favorites\windows live\~sdd4af.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\links\~sdd4c0.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\~sdd4d1.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\~sdd4f1.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\~sdd511.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\~sdd522.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\~sdd59f.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\0-sd9l8u\~sdd5b0. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\r4lsao\~sdd5c1.tm | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | p | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\~sdd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 5c2.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\~sdd5c3.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\55woz240.jpg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\55woz240.jpg.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\j5lndpj\~sdd612.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\j5lndpj\rely_w0.jpg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\j5lndpj\rely_w0.jpg.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\j5lndpj\txokdckrvk.jpg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\j5lndpj\txokdckrvk.jpg.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\~sdd651.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\u0low_3k9h1go | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | py7.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\u0low_3k9h1go | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | py7.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\~sdd681.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\~sdd6a1.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\~sdd | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 6b2.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \~sdd6d2.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | \uvrcjvwuev0rc6u9m.jpg | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \uvrcjvwuev0rc6u9m.jpg.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\_2hzdo\~sdd79e.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\_2hzdo\soyiwozbtzrklfzgmav.jpg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\_2hzdo\soyiwozbtzrklfzgmav.jpg. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\saved games\~sdd7cd.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\searches\~sdd7ce.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\~sdd7df.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\~sdd83e.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\hakyslty-m-z9\~sdd85e.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\~sdd8bc.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\~sdd8cd.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | fq8j\~sdd8de.tmp | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\~sdd91d.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\desktop\~sdd92e.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\documents\~sdd92f.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\downloads\~sdd93f.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\favorites\~sdd940.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\libraries\~sdd98f.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\music\~sdd9a0.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\music\sample music\~sdd9d0.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\~sdd9e0.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\sample pictures\~sdd9e1.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\sample pictures\chrysanthemum.jpg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\sample pictures\chrysanthemum.jpg.w | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\sample pictures\desert.jpg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\sample pictures\desert.jpg.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\sample pictures\hydrangeas.jpg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\sample pictures\hydrangeas.jpg.wncr | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | yt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\sample pictures\jellyfish.jpg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\sample pictures\jellyfish.jpg.wncry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | t | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\sample pictures\koala.jpg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\sample pictures\koala.jpg.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\sample pictures\lighthouse.jpg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\sample pictures\lighthouse.jpg.wncr | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | yt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\sample pictures\penguins.jpg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\sample pictures\penguins.jpg.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\sample pictures\tulips.jpg | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\pictures\sample pictures\tulips.jpg.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\recorded tv\~sddeb3.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\recorded tv\sample media\~sddeb4.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\videos\~sddec4.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\videos\sample videos\~sddec5.tmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\bootsect.bak | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\bootsect.bak.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\device\{113527a4-4 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\background.png | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\device\{113527a4-4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\background.png.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\device\{113527a4-4 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\device.png | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\device\{113527a4-4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\device.png.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\device\{113527a4-4 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\overlay.png | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\device\{113527a4-4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\overlay.png.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\device\{113527a4-4 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\superbar.png | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\device\{113527a4-4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\superbar.png.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\device\{8702d817-5 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | aad-4674-9ef3-4d3decd87120}\background.png | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\device\{8702d817-5 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | aad-4674-9ef3-4d3decd87120}\background.png.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\device\{8702d817-5 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | aad-4674-9ef3-4d3decd87120}\watermark.png | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\device stage\device\{8702d817-5 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | aad-4674-9ef3-4d3decd87120}\watermark.png.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\search\data\applications\window | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | s\windows.edb | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\search\data\applications\window | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\windows.edb.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\guest.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\guest.bmp | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | .wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\user.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\user.bmp. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile10.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile10.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile11.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile11.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile12.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile12.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile13.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile13.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile14.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile14.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile15.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile15.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile16.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile16.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile17.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile17.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile18.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile18.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile19.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile19.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile20.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile20.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile21.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile21.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile22.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile22.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile23.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile23.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile24.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile24.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile25.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile25.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile26.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile26.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile27.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile27.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile28.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile28.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile29.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile29.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile30.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile30.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile31.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile31.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile32.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile32.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile33.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile33.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile34.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile34.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile35.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile35.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile36.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile36.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile37.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile37.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile38.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile38.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile39.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile39.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile40.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile40.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile41.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile41.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile42.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile42.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile43.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile43.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ictures\usertile44.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\user account pictures\default p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ictures\usertile44.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\caches\cversions.2.db | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\caches\cversions.2.db.w | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\caches\{67d69890-d853-4 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | 011-a87e-aa64fa83ce5a}.2.ver0x0000000000000002.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\caches\{67d69890-d853-4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 011-a87e-aa64fa83ce5a}.2.ver0x0000000000000002.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000004.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000004.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000006.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000006.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000007.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000007.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\caches\{7cd55808-3d38-4 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | dd5-90c9-62f0e6ee60d4}.2.ver0x0000000000000001.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\caches\{7cd55808-3d38-4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | dd5-90c9-62f0e6ee60d4}.2.ver0x0000000000000001.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\caches\{ddf571f2-be98-4 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | 26d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\caches\{ddf571f2-be98-4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 26d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 01.w | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ma | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 01.w | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ma.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 02.w | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ma | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 02.w | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ma.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 03.w | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ma | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 03.w | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ma.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 04.w | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ma | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 04.w | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ma.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 05.w | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ma | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 05.w | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ma.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 06.w | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ma | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 06.w | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ma.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 07.w | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ma | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 07.w | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ma.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 08.w | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ma | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 08.w | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ma.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 09.w | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ma | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 09.w | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ma.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 10.w | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ma | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows\ringtones\ringtone 10.w | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ma.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\e | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | n-us\welcomefax.tif | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\e | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | n-us\welcomefax.tif.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\iconcache.db | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\iconcache.db.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\explorer\th | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | umbcache_256.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\explorer\th | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | umbcache_256.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\explorer\th | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | umbcache_idx.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\explorer\th | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | umbcache_idx.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\iconcache.db | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\iconcache.db.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | r\brndlog.bak | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | r\brndlog.bak.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\c | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | versions.1.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\c | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | versions.1.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000 | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | | | f.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000 | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | | | f.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001 | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | | | 0.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001 | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | | | 0.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | \thumbcache_256.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \thumbcache_256.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 2 | | | \thumbcache_32.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \thumbcache_32.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | \thumbcache_96.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \thumbcache_96.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | \thumbcache_idx.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \thumbcache_idx.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\bp7n0_qwtwkorxg.mp3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\bp7n0_qwtwkorxg.mp3.wncr | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | yt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\bywi0qluwl3w9bud5f3o.gif | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\bywi0qluwl3w9bud5f3o.gif | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | .wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\dayij9-o1e8.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\dayij9-o1e8.bmp.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\dhlstwctu20.swf | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\dhlstwctu20.swf.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\djlklpzvvty.swf | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\djlklpzvvty.swf.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\dz0vptp5owvhzt.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\dz0vptp5owvhzt.bmp.wncry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | t | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\g2kjjoggr_cgbs8b.flv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\g2kjjoggr_cgbs8b.flv.wnc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\g_iap-kg5-s.wav | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\g_iap-kg5-s.wav.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\jqzjf0k.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\jqzjf0k.bmp.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\mhjvg24dofm.pps | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\mhjvg24dofm.pps.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\nrae.png | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\nrae.png.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\o8fcddpbkgpe-.swf | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\o8fcddpbkgpe-.swf.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\ojefr7lfa6sgok2mjmm.mp3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\ojefr7lfa6sgok2mjmm.mp3. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\orfn2vwitjww5.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\orfn2vwitjww5.bmp.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\ph1dzo_.png | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\ph1dzo_.png.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\qq1a2p8piiy_edbcli.mkv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\qq1a2p8piiy_edbcli.mkv.w | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\qwg2cvfqc9ez1jca.mp3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\qwg2cvfqc9ez1jca.mp3.wnc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\ra-n6lubasx5.swf | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\ra-n6lubasx5.swf.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\rjwem.avi | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\rjwem.avi.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\sh5e3mmjvux.mkv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\sh5e3mmjvux.mkv.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\sl9ersroh9zeq.png | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\sl9ersroh9zeq.png.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\uaebzgeiegneodnlxncn.mkv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\uaebzgeiegneodnlxncn.mkv | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | .wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\ultbjg f.pps | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\ultbjg f.pps.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\uywba9uh15vmu3etzhh-.mkv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\uywba9uh15vmu3etzhh-.mkv | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | .wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\vsm1crhdjx95vtws.flv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\vsm1crhdjx95vtws.flv.wnc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\wgxrl2.odt | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\wgxrl2.odt.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\xdsqx_wxf9k9q.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\xdsqx_wxf9k9q.bmp.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\xf1j6kjktjpo ac8gr6.ots | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\xf1j6kjktjpo ac8gr6.ots. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\zmej2xz6d3on_bh9gk7g.wav | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\zmej2xz6d3on_bh9gk7g.wav | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | .wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\dfkh.wav | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\dfkh.wav.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\hmdiztpptjk3.wav | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\hmdiztpptjk3.wav.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\zptabq.mp3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\zptabq.mp3.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\lk-vjlkc3mbxebkrauk.wa | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | v | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\lk-vjlkc3mbxebkrauk.wa | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | v.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\9 bxr.wav | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\9 bxr.wav.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\bm1lj1elmahv.wav | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\bm1lj1elmahv.wav. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\hwq_e63aib.wav | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\hwq_e63aib.wav.wn | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | cryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\qni_.mp3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\qni_.mp3.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\zhvacu3zm4pi0lqv. | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | mp3 | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\zhvacu3zm4pi0lqv. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | mp3.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\0qrd5fx.mp3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\0qrd5fx.mp3.wn | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | cryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\vox09umk.mp3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\vox09umk.mp3.w | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\2reugw.wav | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\2reugw.wav.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\4sarhcvjd04q.mp3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\4sarhcvjd04q.mp3. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\9z_ehnks.wav | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\9z_ehnks.wav.wncr | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | yt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\c5alotv4.wav | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\c5alotv4.wav.wncr | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | yt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\kfqjlmnelq.mp3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\kfqjlmnelq.mp3.wn | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | cryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\mlx4g8dg4dbcwao4. | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | wav | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\mlx4g8dg4dbcwao4. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | wav.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\0-sd9l8u\dji4emfc | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | xz9.wav | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\0-sd9l8u\dji4emfc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | xz9.wav.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\r4lsao\csxh-dp0pz | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | vfbfnnd.mp3 | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\r4lsao\csxh-dp0pz | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | vfbfnnd.mp3.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\gi9i | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | p_csel.mp3 | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\gi9i | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | p_csel.mp3.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\s9_2 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | q.wav | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\s9_2 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | q.wav.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\xysc | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | fw4.mp3 | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\xysc | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | fw4.mp3.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\aicirck.gif | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\aicirck.gif.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\drba.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\drba.bmp.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\eszy hkfdwfx0.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\eszy hkfdwfx0.bmp.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\imjwbtsshxgloi.gif | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\imjwbtsshxgloi.gif.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\n5vvg0h1npv.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\n5vvg0h1npv.bmp.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\pwvh0sxs 4u.gif | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\pwvh0sxs 4u.gif.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\r9tluytrypiqhwf.gif | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\r9tluytrypiqhwf.gif.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\_y79.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\_y79.bmp.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\j5lndpj\5he-bihy791udb060xb.gif | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\j5lndpj\5he-bihy791udb060xb.gif | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | .wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\j5lndpj\jgg9piy6c.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\j5lndpj\jgg9piy6c.bmp.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\4r2l.png | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\4r2l.png.wncr | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | yt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\wosctyozygi-. | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | png | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\wosctyozygi-. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | png.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\d0ifk_s5cqbrv.png | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\d0ifk_s5cqbrv.png.wncr | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | yt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\h pgorp n6u.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\h pgorp n6u.bmp.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\rgfjlx032dp7.gif | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\rgfjlx032dp7.gif.wncry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | t | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\wu4tbykxf6k0p.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\wu4tbykxf6k0p.bmp.wncr | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | yt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\xqj6y5vsd79ypdjyjlfn.p | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | ng | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\xqj6y5vsd79ypdjyjlfn.p | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ng.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\zlpvbnitdrc.png | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\zlpvbnitdrc.png.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\_nmlicbf8j8nqyjj7kp.bm | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | p | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\_nmlicbf8j8nqyjj7kp.bm | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | p.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\2bzr.gif | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\2bzr.gif.wncry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | t | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\khl4ego4d 5rt4 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | l.bmp | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\khl4ego4d 5rt4 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | l.bmp.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\spxsplgrt3p.pn | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | g | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\spxsplgrt3p.pn | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | g.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\xyz8ce1lhaimq. | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | gif | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\xyz8ce1lhaimq. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | gif.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\awko | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | rjfj_tbwlbiowt.png | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\awko | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | rjfj_tbwlbiowt.png.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\mnu7 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | k.png | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\mnu7 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | k.png.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\oxdt | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | .png | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\oxdt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | .png.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | \mhanq6ms_jz ssx.png | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \mhanq6ms_jz ssx.png.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\_2hzdo\8r-qyt.png | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\_2hzdo\8r-qyt.png.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\_2hzdo\ddw1j2dvm.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\_2hzdo\ddw1j2dvm.bmp.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\_2hzdo\ehtgsx0.bmp | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\_2hzdo\ehtgsx0.bmp.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\_2hzdo\oiputxj.png | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\_2hzdo\oiputxj.png.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\_2hzdo\wxqsaaq6i.gif | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\pictures\_2hzdo\wxqsaaq6i.gif.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\0rt9n7waqqvk6-s.swf | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\0rt9n7waqqvk6-s.swf.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\gls-an3bnb6su.mkv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\gls-an3bnb6su.mkv.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\hi-kh7n3amacgd.mkv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\hi-kh7n3amacgd.mkv.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\ouvp28f9ewmi29.swf | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\ouvp28f9ewmi29.swf.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\rlh2om7hsceo6pzume.swf | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\rlh2om7hsceo6pzume.swf.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\676ht6zbx.mkv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\676ht6zbx.mkv. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\929sjpu-xrkj3e | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | 1t9j7.mkv | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\929sjpu-xrkj3e | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 1t9j7.mkv.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\bcyq1.flv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\bcyq1.flv.wncr | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | yt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\hve _ffgg.avi | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\hve _ffgg.avi. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\oia-6xvkp.swf | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\oia-6xvkp.swf. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\peij538fk.mp4 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\peij538fk.mp4. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\hakyslty-m-z9\2iw7k-.mkv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\hakyslty-m-z9\2iw7k-.mkv.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\hakyslty-m-z9\kdlazanuxnjlg4yrhvf | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | q.mp4 | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\hakyslty-m-z9\kdlazanuxnjlg4yrhvf | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | q.mp4.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\hakyslty-m-z9\l1fq7b itpwhhcdab05 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | u.avi | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\hakyslty-m-z9\l1fq7b itpwhhcdab05 | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | u.avi.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\hakyslty-m-z9\lhhbjhevi.mkv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\hakyslty-m-z9\lhhbjhevi.mkv.wncry | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | t | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\hakyslty-m-z9\milwbj.flv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\hakyslty-m-z9\milwbj.flv.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\hakyslty-m-z9\mr1ex3.swf | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\hakyslty-m-z9\mr1ex3.swf.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\hakyslty-m-z9\vc2cl4ln.mkv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\hakyslty-m-z9\vc2cl4ln.mkv.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\4oj9yfl3dn.flv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\4oj9yfl3dn.flv.wncr | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | yt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\agmtjgfx.mkv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\agmtjgfx.mkv.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\hsbc.mkv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\hsbc.mkv.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\hwj0zzo_r1q_pfff2.a | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | vi | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\hwj0zzo_r1q_pfff2.a | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | vi.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\kj9gatk fbtmtzat.sw | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | f | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\kj9gatk fbtmtzat.sw | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | f.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\nbuaos9o4zd04f6rvgq | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | y.swf | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\nbuaos9o4zd04f6rvgq | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | y.swf.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\rh6x.mp4 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\rh6x.mp4.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\_akuod4i4xu431o1mvn | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | e.flv | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\_akuod4i4xu431o1mvn | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | e.flv.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\gdhhhwnb.flv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\gdhhhwnb.flv.w | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | ncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\t0_1iokbd.swf | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\t0_1iokbd.swf. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\vbvvvvb4i.mkv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\vbvvvvb4i.mkv. | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ydjjqoani2hety | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | 5e.mkv | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ydjjqoani2hety | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | 5e.mkv.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | fq8j\87xpzn.mp4 | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | fq8j\87xpzn.mp4.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | fq8j\dd3qogjnlsgkg1--_vs.mkv | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | fq8j\dd3qogjnlsgkg1--_vs.mkv.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | fq8j\djqc-.mkv | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | fq8j\djqc-.mkv.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | fq8j\immdtks6k.flv | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | fq8j\immdtks6k.flv.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | fq8j\osbg1m5t.flv | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | fq8j\osbg1m5t.flv.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | fq8j\qa9nxio402_he z.swf | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | fq8j\qa9nxio402_he z.swf.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\music\sample music\kalimba.mp3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\music\sample music\kalimba.mp3.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\music\sample music\maid with the flaxen hair | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | .mp3 | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\music\sample music\maid with the flaxen hair | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | .mp3.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\music\sample music\sleep away.mp3 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\music\sample music\sleep away.mp3.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\videos\sample videos\wildlife.wmv | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\public\videos\sample videos\wildlife.wmv.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\autoexec.bat | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\autoexec.bat.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\explorer\th | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | umbcache_1024.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\explorer\th | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | umbcache_1024.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\explorer\th | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | umbcache_32.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\explorer\th | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | umbcache_32.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\explorer\th | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | umbcache_96.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\explorer\th | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | umbcache_96.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\explorer\th | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | umbcache_sr.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\default\appdata\local\microsoft\windows\explorer\th | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | umbcache_sr.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | \thumbcache_1024.db | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \thumbcache_1024.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | \thumbcache_sr.db.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | s\low\dssdpmx042@google[2].txt | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\low\dssdpmx042@google[2].txt.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | s\low\dssdpmx042@java[1].txt | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\low\dssdpmx042@java[1].txt.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | True | 1 | | | s\low\dssdpmx042@oracle.112.2o7[2].txt | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | s\low\dssdpmx042@oracle.112.2o7[2].txt.wncryt | ALWAYS, file_attributes = FILE_ATTRIBUTE_NORMAL | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\hiberfil.sys | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | False | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\pagefile.sys | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | False | 1 | | | | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\system volume information\{458a7c4b-78cd-11e5-8fa6-c8f981 | desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, | False | 1 | | | b0cd47}{3808876b-c176-4e48-b7ae-04046e6cc752} | FILE_SHARE_WRITE, create_disposition = OPEN_EXISTING | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create | c:\windows\temp\hibsys.wncryt | desired_access = GENERIC_WRITE, create_disposition = CREATE_ | True | 1 | | | | ALWAYS, file_attributes = FILE_ATTRIBUTE_HIDDEN | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\b.wnry | size = 16384 | True | 87 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\b.wnry | size = 14646 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\c.wnry | size = 780 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_bulgarian.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_bulgarian.wnry | size = 15111 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_chinese (simplified). | size = 16384 | True | 3 | | | wnry | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_chinese (simplified). | size = 5207 | True | 1 | | | wnry | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_chinese (traditional) | size = 16384 | True | 4 | | | .wnry | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_chinese (traditional) | size = 13810 | True | 1 | | | .wnry | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_croatian.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_croatian.wnry | size = 6302 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_czech.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_czech.wnry | size = 7744 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_danish.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_danish.wnry | size = 4277 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_dutch.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_dutch.wnry | size = 4219 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_english.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_english.wnry | size = 4205 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_filipino.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_filipino.wnry | size = 4812 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_finnish.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_finnish.wnry | size = 5609 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_french.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_french.wnry | size = 5669 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_german.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_german.wnry | size = 4413 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_greek.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_greek.wnry | size = 16276 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_indonesian.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_indonesian.wnry | size = 4428 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_italian.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_italian.wnry | size = 4115 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_japanese.wnry | size = 16384 | True | 4 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_japanese.wnry | size = 16308 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_korean.wnry | size = 16384 | True | 5 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_korean.wnry | size = 9581 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_latvian.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_latvian.wnry | size = 8401 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_norwegian.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_norwegian.wnry | size = 4809 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_polish.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_polish.wnry | size = 7128 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_portuguese.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_portuguese.wnry | size = 5149 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_romanian.wnry | size = 16384 | True | 3 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_romanian.wnry | size = 3009 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_russian.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_russian.wnry | size = 14340 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_slovak.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_slovak.wnry | size = 8623 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_spanish.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_spanish.wnry | size = 4613 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_swedish.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_swedish.wnry | size = 5715 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_turkish.wnry | size = 16384 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_turkish.wnry | size = 9814 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_vietnamese.wnry | size = 16384 | True | 5 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\msg\m_vietnamese.wnry | size = 11858 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\r.wnry | size = 864 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\s.wnry | size = 16384 | True | 185 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\s.wnry | size = 7246 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\t.wnry | size = 16384 | True | 4 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\t.wnry | size = 280 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\taskdl.exe | size = 16384 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\taskdl.exe | size = 4096 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\taskse.exe | size = 16384 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\taskse.exe | size = 4096 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\u.wnry | size = 16384 | True | 15 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\00000000.pky | size = 276 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\00000000.eky | size = 4 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\00000000.eky | size = 1280 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\programdata\qxtqusdnjzrizx418\00000000.res | size = 136 | True | 10 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\bibagpmyuse2qjdfr.jpg.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\bibagpmyuse2qjdfr.jpg.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\bibagpmyuse2qjdfr.jpg.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\bibagpmyuse2qjdfr.jpg.wncryt | size = 11072 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\bibagpmyuse2qjdfr.jpg | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\bibagpmyuse2qjdfr.jpg | size = 11064 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\h yrmf.docx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\h yrmf.docx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\h yrmf.docx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\h yrmf.docx.wncryt | size = 22528 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\h yrmf.docx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\h yrmf.docx | size = 22528 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\hwef8jg56gk9dlonf.csv.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\hwef8jg56gk9dlonf.csv.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\hwef8jg56gk9dlonf.csv.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\hwef8jg56gk9dlonf.csv.wncryt | size = 82512 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\hwef8jg56gk9dlonf.csv | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\hwef8jg56gk9dlonf.csv | size = 82500 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2bnrt.xlsx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2bnrt.xlsx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2bnrt.xlsx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2bnrt.xlsx.wncryt | size = 73200 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2bnrt.xlsx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2bnrt.xlsx | size = 73192 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\qb17mfblutnx_jw3.jpg.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\qb17mfblutnx_jw3.jpg.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\qb17mfblutnx_jw3.jpg.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\qb17mfblutnx_jw3.jpg.wncryt | size = 40960 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\qb17mfblutnx_jw3.jpg | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\qb17mfblutnx_jw3.jpg | size = 40955 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\xirvpsv.pptx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\xirvpsv.pptx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\xirvpsv.pptx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\xirvpsv.pptx.wncryt | size = 59808 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\xirvpsv.pptx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\xirvpsv.pptx | size = 59796 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\z89la7110x3isdf6.doc.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\z89la7110x3isdf6.doc.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\z89la7110x3isdf6.doc.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\z89la7110x3isdf6.doc.wncryt | size = 36768 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\z89la7110x3isdf6.doc | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\z89la7110x3isdf6.doc | size = 36763 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\6pkpcf4uawt | size = 8 | True | 2 | | | zg4xqlmdz.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\6pkpcf4uawt | size = 4 | True | 2 | | | zg4xqlmdz.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\6pkpcf4uawt | size = 256 | True | 1 | | | zg4xqlmdz.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\6pkpcf4uawt | size = 99952 | True | 1 | | | zg4xqlmdz.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\6pkpcf4uawt | size = 1024 | True | 1 | | | zg4xqlmdz.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\6pkpcf4uawt | size = 99945 | True | 1 | | | zg4xqlmdz.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 8 | True | 2 | | | ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 4 | True | 2 | | | ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 256 | True | 1 | | | ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 82176 | True | 1 | | | ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 1024 | True | 1 | | | ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 82176 | True | 1 | | | ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\3kmod_2d6ued.swf.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\3kmod_2d6ued.swf.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\3kmod_2d6ued.swf.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\3kmod_2d6ued.swf.wncryt | size = 87632 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\3kmod_2d6ued.swf | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\3kmod_2d6ued.swf | size = 87623 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\acndlsz4zhbdyziqkotj.mp3.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\acndlsz4zhbdyziqkotj.mp3.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\acndlsz4zhbdyziqkotj.mp3.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\acndlsz4zhbdyziqkotj.mp3.wncryt | size = 81600 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\acndlsz4zhbdyziqkotj.mp3 | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\acndlsz4zhbdyziqkotj.mp3 | size = 81590 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\ajkh5gnvfe8rqzavym.png.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\ajkh5gnvfe8rqzavym.png.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\ajkh5gnvfe8rqzavym.png.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\ajkh5gnvfe8rqzavym.png.wncryt | size = 76048 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\ajkh5gnvfe8rqzavym.png | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\ajkh5gnvfe8rqzavym.png | size = 76047 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\blw7.png.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\blw7.png.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\blw7.png.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\blw7.png.wncryt | size = 47952 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\blw7.png | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\blw7.png | size = 47942 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\c9dt7ht6ochw_r.flv.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\c9dt7ht6ochw_r.flv.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\c9dt7ht6ochw_r.flv.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\c9dt7ht6ochw_r.flv.wncryt | size = 82288 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\c9dt7ht6ochw_r.flv | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\c9dt7ht6ochw_r.flv | size = 82273 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\fycbs5cumf6dh_fs.ods.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\fycbs5cumf6dh_fs.ods.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\fycbs5cumf6dh_fs.ods.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\fycbs5cumf6dh_fs.ods.wncryt | size = 15344 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\fycbs5cumf6dh_fs.ods | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\fycbs5cumf6dh_fs.ods | size = 15333 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\gfs3quzvztmy-jq6xox.bmp.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\gfs3quzvztmy-jq6xox.bmp.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\gfs3quzvztmy-jq6xox.bmp.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\gfs3quzvztmy-jq6xox.bmp.wncryt | size = 39552 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\gfs3quzvztmy-jq6xox.bmp | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\gfs3quzvztmy-jq6xox.bmp | size = 39552 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\h4mzf.bmp.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\h4mzf.bmp.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\h4mzf.bmp.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\h4mzf.bmp.wncryt | size = 28912 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\h4mzf.bmp | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\h4mzf.bmp | size = 28912 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\hyxaas7ppqlngg5ir6.mp4.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\hyxaas7ppqlngg5ir6.mp4.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\hyxaas7ppqlngg5ir6.mp4.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\hyxaas7ppqlngg5ir6.mp4.wncryt | size = 45632 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\hyxaas7ppqlngg5ir6.mp4 | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\hyxaas7ppqlngg5ir6.mp4 | size = 45622 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\kit3qjluq u1ehoy.wav.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\kit3qjluq u1ehoy.wav.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\kit3qjluq u1ehoy.wav.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\kit3qjluq u1ehoy.wav.wncryt | size = 74832 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\kit3qjluq u1ehoy.wav | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\kit3qjluq u1ehoy.wav | size = 74827 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\lkwb.wav.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\lkwb.wav.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\lkwb.wav.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\lkwb.wav.wncryt | size = 75520 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\lkwb.wav | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\lkwb.wav | size = 75516 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\m-flkfw.pps.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\m-flkfw.pps.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\m-flkfw.pps.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\m-flkfw.pps.wncryt | size = 41840 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\m-flkfw.pps | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\m-flkfw.pps | size = 41838 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\p6tg4g.bmp.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\p6tg4g.bmp.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\p6tg4g.bmp.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\p6tg4g.bmp.wncryt | size = 92464 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\p6tg4g.bmp | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\p6tg4g.bmp | size = 92452 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\ytaj9x8n5wxojmujtmi.gif.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\ytaj9x8n5wxojmujtmi.gif.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\ytaj9x8n5wxojmujtmi.gif.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\ytaj9x8n5wxojmujtmi.gif.wncryt | size = 31968 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\ytaj9x8n5wxojmujtmi.gif | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\ytaj9x8n5wxojmujtmi.gif | size = 31958 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\zb1nbq.mp4.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\zb1nbq.mp4.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\zb1nbq.mp4.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\zb1nbq.mp4.wncryt | size = 43232 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\zb1nbq.mp4 | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\zb1nbq.mp4 | size = 43232 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\zu3ocp3f88cn.flv.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\zu3ocp3f88cn.flv.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\zu3ocp3f88cn.flv.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\zu3ocp3f88cn.flv.wncryt | size = 88928 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\zu3ocp3f88cn.flv | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\zu3ocp3f88cn.flv | size = 88916 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\- jmajpm5_r | size = 8 | True | 2 | | | ro.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\- jmajpm5_r | size = 4 | True | 2 | | | ro.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\- jmajpm5_r | size = 256 | True | 1 | | | ro.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\- jmajpm5_r | size = 86480 | True | 1 | | | ro.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\- jmajpm5_r | size = 1024 | True | 1 | | | ro.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\- jmajpm5_r | size = 86471 | True | 1 | | | ro.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\mf1nbo.swf. | size = 8 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\mf1nbo.swf. | size = 4 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\mf1nbo.swf. | size = 256 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\mf1nbo.swf. | size = 19696 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\mf1nbo.swf | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\mf1nbo.swf | size = 19695 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ksln | size = 8 | True | 2 | | | i5puyuj.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ksln | size = 4 | True | 2 | | | i5puyuj.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ksln | size = 256 | True | 1 | | | i5puyuj.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ksln | size = 71136 | True | 1 | | | i5puyuj.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ksln | size = 1024 | True | 1 | | | i5puyuj.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ksln | size = 71127 | True | 1 | | | i5puyuj.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ntjk | size = 8 | True | 2 | | | r9csa.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ntjk | size = 4 | True | 2 | | | r9csa.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ntjk | size = 256 | True | 1 | | | r9csa.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ntjk | size = 85952 | True | 1 | | | r9csa.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ntjk | size = 1024 | True | 1 | | | r9csa.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ntjk | size = 85942 | True | 1 | | | r9csa.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\nxds | size = 8 | True | 2 | | | miu.odp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\nxds | size = 4 | True | 2 | | | miu.odp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\nxds | size = 256 | True | 1 | | | miu.odp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\nxds | size = 25920 | True | 1 | | | miu.odp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\nxds | size = 1024 | True | 1 | | | miu.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\nxds | size = 25907 | True | 1 | | | miu.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 8 | True | 2 | | | \2h9gjyzxutjtaj vlt76.ods.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 4 | True | 2 | | | \2h9gjyzxutjtaj vlt76.ods.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 256 | True | 1 | | | \2h9gjyzxutjtaj vlt76.ods.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 24752 | True | 1 | | | \2h9gjyzxutjtaj vlt76.ods.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 1024 | True | 1 | | | \2h9gjyzxutjtaj vlt76.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 24745 | True | 1 | | | \2h9gjyzxutjtaj vlt76.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 8 | True | 2 | | | \9wcvzyuqncphgsqczkn.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 4 | True | 2 | | | \9wcvzyuqncphgsqczkn.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 256 | True | 1 | | | \9wcvzyuqncphgsqczkn.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 96624 | True | 1 | | | \9wcvzyuqncphgsqczkn.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 1024 | True | 1 | | | \9wcvzyuqncphgsqczkn.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 96618 | True | 1 | | | \9wcvzyuqncphgsqczkn.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 8 | True | 2 | | | \kpyogarb2ozckx549d.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 4 | True | 2 | | | \kpyogarb2ozckx549d.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 256 | True | 1 | | | \kpyogarb2ozckx549d.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 47600 | True | 1 | | | \kpyogarb2ozckx549d.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 1024 | True | 1 | | | \kpyogarb2ozckx549d.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 47599 | True | 1 | | | \kpyogarb2ozckx549d.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 8 | True | 2 | | | \z8mf4.avi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 4 | True | 2 | | | \z8mf4.avi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 256 | True | 1 | | | \z8mf4.avi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 81440 | True | 1 | | | \z8mf4.avi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 1024 | True | 1 | | | \z8mf4.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 81440 | True | 1 | | | \z8mf4.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 8 | True | 2 | | | ysj1\tey_zyonktol5ojrt0io.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 4 | True | 2 | | | ysj1\tey_zyonktol5ojrt0io.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 256 | True | 1 | | | ysj1\tey_zyonktol5ojrt0io.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 20464 | True | 1 | | | ysj1\tey_zyonktol5ojrt0io.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 1024 | True | 1 | | | ysj1\tey_zyonktol5ojrt0io.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 20462 | True | 1 | | | ysj1\tey_zyonktol5ojrt0io.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 8 | True | 2 | | | ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 4 | True | 2 | | | ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 256 | True | 1 | | | ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 7200 | True | 1 | | | ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 1024 | True | 1 | | | ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 7197 | True | 1 | | | ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 8 | True | 2 | | | ysj1\2tpofaj-rucn\93pm.gif.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 4 | True | 2 | | | ysj1\2tpofaj-rucn\93pm.gif.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 256 | True | 1 | | | ysj1\2tpofaj-rucn\93pm.gif.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 11600 | True | 1 | | | ysj1\2tpofaj-rucn\93pm.gif.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 1024 | True | 1 | | | ysj1\2tpofaj-rucn\93pm.gif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 11589 | True | 1 | | | ysj1\2tpofaj-rucn\93pm.gif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 8 | True | 2 | | | ysj1\2tpofaj-rucn\cxy8v.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 4 | True | 2 | | | ysj1\2tpofaj-rucn\cxy8v.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 256 | True | 1 | | | ysj1\2tpofaj-rucn\cxy8v.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 99168 | True | 1 | | | ysj1\2tpofaj-rucn\cxy8v.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 1024 | True | 1 | | | ysj1\2tpofaj-rucn\cxy8v.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 99165 | True | 1 | | | ysj1\2tpofaj-rucn\cxy8v.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 8 | True | 2 | | | ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 4 | True | 2 | | | ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 256 | True | 1 | | | ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 3616 | True | 1 | | | ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 1024 | True | 1 | | | ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 3616 | True | 1 | | | ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 8 | True | 2 | | | ysj1\2tpofaj-rucn\yg84pi.avi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 4 | True | 2 | | | ysj1\2tpofaj-rucn\yg84pi.avi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 256 | True | 1 | | | ysj1\2tpofaj-rucn\yg84pi.avi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 36688 | True | 1 | | | ysj1\2tpofaj-rucn\yg84pi.avi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 1024 | True | 1 | | | ysj1\2tpofaj-rucn\yg84pi.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 36687 | True | 1 | | | ysj1\2tpofaj-rucn\yg84pi.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 8 | True | 2 | | | ysj1\2tpofaj-rucn\yoo37jp7q.wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 4 | True | 2 | | | ysj1\2tpofaj-rucn\yoo37jp7q.wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 256 | True | 1 | | | ysj1\2tpofaj-rucn\yoo37jp7q.wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 71088 | True | 1 | | | ysj1\2tpofaj-rucn\yoo37jp7q.wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 1024 | True | 1 | | | ysj1\2tpofaj-rucn\yoo37jp7q.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 71084 | True | 1 | | | ysj1\2tpofaj-rucn\yoo37jp7q.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\5dwumhpov0ond.doc.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\5dwumhpov0ond.doc.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\5dwumhpov0ond.doc.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\5dwumhpov0ond.doc.wncryt | size = 90592 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\5dwumhpov0ond.doc | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\5dwumhpov0ond.doc | size = 90586 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\5pfcgtj7-40fzu.docx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\5pfcgtj7-40fzu.docx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\5pfcgtj7-40fzu.docx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\5pfcgtj7-40fzu.docx.wncryt | size = 88336 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\5pfcgtj7-40fzu.docx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\5pfcgtj7-40fzu.docx | size = 88331 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\9c54.docx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\9c54.docx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\9c54.docx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\9c54.docx.wncryt | size = 83216 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\9c54.docx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\9c54.docx | size = 83207 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\axmcb.docx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\axmcb.docx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\axmcb.docx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\axmcb.docx.wncryt | size = 80464 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\axmcb.docx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\axmcb.docx | size = 80457 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\f8t0d1hl8mulgw0ye.pptx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\f8t0d1hl8mulgw0ye.pptx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\f8t0d1hl8mulgw0ye.pptx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\f8t0d1hl8mulgw0ye.pptx.wncryt | size = 8800 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\f8t0d1hl8mulgw0ye.pptx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\f8t0d1hl8mulgw0ye.pptx | size = 8796 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\g9fp hftlrgz5w.xls.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\g9fp hftlrgz5w.xls.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\g9fp hftlrgz5w.xls.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\g9fp hftlrgz5w.xls.wncryt | size = 77088 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\g9fp hftlrgz5w.xls | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\g9fp hftlrgz5w.xls | size = 77086 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\gmphr0w6rrpdhpbef.csv.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\gmphr0w6rrpdhpbef.csv.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\gmphr0w6rrpdhpbef.csv.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\gmphr0w6rrpdhpbef.csv.wncryt | size = 35488 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\gmphr0w6rrpdhpbef.csv | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\gmphr0w6rrpdhpbef.csv | size = 35484 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\gpimnirm chkjuih.xlsx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\gpimnirm chkjuih.xlsx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\gpimnirm chkjuih.xlsx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\gpimnirm chkjuih.xlsx.wncryt | size = 57328 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\gpimnirm chkjuih.xlsx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\gpimnirm chkjuih.xlsx | size = 57320 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\hemk7ngcvjguirn6.xlsx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\hemk7ngcvjguirn6.xlsx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\hemk7ngcvjguirn6.xlsx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\hemk7ngcvjguirn6.xlsx.wncryt | size = 20144 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\hemk7ngcvjguirn6.xlsx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\hemk7ngcvjguirn6.xlsx | size = 20129 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\kqsfgiuuv7macle5kbe.pptx.wncry | size = 8 | True | 2 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\kqsfgiuuv7macle5kbe.pptx.wncry | size = 4 | True | 2 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\kqsfgiuuv7macle5kbe.pptx.wncry | size = 256 | True | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\kqsfgiuuv7macle5kbe.pptx.wncry | size = 46816 | True | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\kqsfgiuuv7macle5kbe.pptx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\kqsfgiuuv7macle5kbe.pptx | size = 46813 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\lsifcdcb6tbfbadh2jc.pptx.wncry | size = 8 | True | 2 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\lsifcdcb6tbfbadh2jc.pptx.wncry | size = 4 | True | 2 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\lsifcdcb6tbfbadh2jc.pptx.wncry | size = 256 | True | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\lsifcdcb6tbfbadh2jc.pptx.wncry | size = 1760 | True | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\lsifcdcb6tbfbadh2jc.pptx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\lsifcdcb6tbfbadh2jc.pptx | size = 1757 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\lu6w3pxpu3ca.xlsx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\lu6w3pxpu3ca.xlsx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\lu6w3pxpu3ca.xlsx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\lu6w3pxpu3ca.xlsx.wncryt | size = 13984 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\lu6w3pxpu3ca.xlsx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\lu6w3pxpu3ca.xlsx | size = 13981 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\ly7o.pptx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\ly7o.pptx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\ly7o.pptx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\ly7o.pptx.wncryt | size = 49248 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\ly7o.pptx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\ly7o.pptx | size = 49248 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\qocbs.docx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\qocbs.docx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\qocbs.docx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\qocbs.docx.wncryt | size = 59616 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\qocbs.docx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\qocbs.docx | size = 59605 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\tcrd9un1_myjq-.pptx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\tcrd9un1_myjq-.pptx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\tcrd9un1_myjq-.pptx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\tcrd9un1_myjq-.pptx.wncryt | size = 94496 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\tcrd9un1_myjq-.pptx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\tcrd9un1_myjq-.pptx | size = 94495 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\wv7vnssgbfodzvw.xlsx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\wv7vnssgbfodzvw.xlsx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\wv7vnssgbfodzvw.xlsx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\wv7vnssgbfodzvw.xlsx.wncryt | size = 86000 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\wv7vnssgbfodzvw.xlsx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\wv7vnssgbfodzvw.xlsx | size = 85999 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\yzoy0uk.pptx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\yzoy0uk.pptx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\yzoy0uk.pptx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\yzoy0uk.pptx.wncryt | size = 58176 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\yzoy0uk.pptx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\yzoy0uk.pptx | size = 58175 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\zwklqrq2nlske44p.xlsx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\zwklqrq2nlske44p.xlsx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\zwklqrq2nlske44p.xlsx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\zwklqrq2nlske44p.xlsx.wncryt | size = 65184 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\zwklqrq2nlske44p.xlsx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\zwklqrq2nlske44p.xlsx | size = 65176 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\_xgwdcsgf mjc6 j.docx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\_xgwdcsgf mjc6 j.docx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\_xgwdcsgf mjc6 j.docx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\_xgwdcsgf mjc6 j.docx.wncryt | size = 64624 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\_xgwdcsgf mjc6 j.docx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\_xgwdcsgf mjc6 j.docx | size = 64620 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\-nap.rtf.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\-nap.rtf.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\-nap.rtf.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\-nap.rtf.wncryt | size = 21536 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\-nap.rtf | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\-nap.rtf | size = 21536 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\9o_u.pdf.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\9o_u.pdf.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\9o_u.pdf.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\9o_u.pdf.wncryt | size = 76816 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\9o_u.pdf | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\9o_u.pdf | size = 76804 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\k6fadynloup1zicvtg0o.xl | size = 8 | True | 2 | | | sx.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\k6fadynloup1zicvtg0o.xl | size = 4 | True | 2 | | | sx.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\k6fadynloup1zicvtg0o.xl | size = 256 | True | 1 | | | sx.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\k6fadynloup1zicvtg0o.xl | size = 3040 | True | 1 | | | sx.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\k6fadynloup1zicvtg0o.xl | size = 1024 | True | 1 | | | sx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\k6fadynloup1zicvtg0o.xl | size = 3028 | True | 1 | | | sx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\p3k5i8nny2aq5c.pptx.wnc | size = 8 | True | 2 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\p3k5i8nny2aq5c.pptx.wnc | size = 4 | True | 2 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\p3k5i8nny2aq5c.pptx.wnc | size = 256 | True | 1 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\p3k5i8nny2aq5c.pptx.wnc | size = 70192 | True | 1 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\p3k5i8nny2aq5c.pptx | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\p3k5i8nny2aq5c.pptx | size = 70185 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\y5sy7w | size = 8 | True | 2 | | | jt_a7krqnidgx.xlsx.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\y5sy7w | size = 4 | True | 2 | | | jt_a7krqnidgx.xlsx.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\y5sy7w | size = 256 | True | 1 | | | jt_a7krqnidgx.xlsx.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\y5sy7w | size = 29248 | True | 1 | | | jt_a7krqnidgx.xlsx.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\y5sy7w | size = 1024 | True | 1 | | | jt_a7krqnidgx.xlsx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\y5sy7w | size = 29241 | True | 1 | | | jt_a7krqnidgx.xlsx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 8 | True | 2 | | | sbxkqajovxqwlt.csv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 4 | True | 2 | | | sbxkqajovxqwlt.csv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 256 | True | 1 | | | sbxkqajovxqwlt.csv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 83728 | True | 1 | | | sbxkqajovxqwlt.csv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 1024 | True | 1 | | | sbxkqajovxqwlt.csv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 83722 | True | 1 | | | sbxkqajovxqwlt.csv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\fxx | size = 8 | True | 2 | | | fw-17sc6wh.ppt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\fxx | size = 4 | True | 2 | | | fw-17sc6wh.ppt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\fxx | size = 256 | True | 1 | | | fw-17sc6wh.ppt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\fxx | size = 7952 | True | 1 | | | fw-17sc6wh.ppt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\fxx | size = 1024 | True | 1 | | | fw-17sc6wh.ppt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\fxx | size = 7949 | True | 1 | | | fw-17sc6wh.ppt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\vsh | size = 8 | True | 2 | | | y_qomhsb5w.ppt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\vsh | size = 4 | True | 2 | | | y_qomhsb5w.ppt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\vsh | size = 256 | True | 1 | | | y_qomhsb5w.ppt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\vsh | size = 29008 | True | 1 | | | y_qomhsb5w.ppt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\vsh | size = 1024 | True | 1 | | | y_qomhsb5w.ppt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\vsh | size = 29005 | True | 1 | | | y_qomhsb5w.ppt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 8 | True | 2 | | | c-nspy xfvlw3\coafenjkmrn.xlsx.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 4 | True | 2 | | | c-nspy xfvlw3\coafenjkmrn.xlsx.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 256 | True | 1 | | | c-nspy xfvlw3\coafenjkmrn.xlsx.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 26624 | True | 1 | | | c-nspy xfvlw3\coafenjkmrn.xlsx.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 1024 | True | 1 | | | c-nspy xfvlw3\coafenjkmrn.xlsx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 26614 | True | 1 | | | c-nspy xfvlw3\coafenjkmrn.xlsx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\kqu8ojbhlzr.odp.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\kqu8ojbhlzr.odp.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\kqu8ojbhlzr.odp.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\kqu8ojbhlzr.odp.wncryt | size = 16272 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\kqu8ojbhlzr.odp | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\kqu8ojbhlzr.odp | size = 16263 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\qracrespejeu3.ods.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\qracrespejeu3.ods.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\qracrespejeu3.ods.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\qracrespejeu3.ods.wncryt | size = 19264 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\qracrespejeu3.ods | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\qracrespejeu3.ods | size = 19262 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\t9kbu.ots.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\t9kbu.ots.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\t9kbu.ots.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\t9kbu.ots.wncryt | size = 50576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\t9kbu.ots | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\t9kbu.ots | size = 50566 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\uigp.odp.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\uigp.odp.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\uigp.odp.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\uigp.odp.wncryt | size = 70224 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\uigp.odp | size = 1024 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\uigp.odp | size = 70220 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\v3b5lp | size = 8 | True | 2 | | | gbpfe06xmrqjo.ots.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\v3b5lp | size = 4 | True | 2 | | | gbpfe06xmrqjo.ots.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\v3b5lp | size = 256 | True | 1 | | | gbpfe06xmrqjo.ots.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\v3b5lp | size = 59504 | True | 1 | | | gbpfe06xmrqjo.ots.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\v3b5lp | size = 1024 | True | 1 | | | gbpfe06xmrqjo.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\v3b5lp | size = 59495 | True | 1 | | | gbpfe06xmrqjo.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 8 | True | 2 | | | k_5vq4jhsw8guvo.odp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 4 | True | 2 | | | k_5vq4jhsw8guvo.odp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 256 | True | 1 | | | k_5vq4jhsw8guvo.odp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 14496 | True | 1 | | | k_5vq4jhsw8guvo.odp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 1024 | True | 1 | | | k_5vq4jhsw8guvo.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 14482 | True | 1 | | | k_5vq4jhsw8guvo.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 8 | True | 2 | | | qbqa9 xzsel7xnah8.pps.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 4 | True | 2 | | | qbqa9 xzsel7xnah8.pps.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 256 | True | 1 | | | qbqa9 xzsel7xnah8.pps.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 45184 | True | 1 | | | qbqa9 xzsel7xnah8.pps.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 1024 | True | 1 | | | qbqa9 xzsel7xnah8.pps | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 45172 | True | 1 | | | qbqa9 xzsel7xnah8.pps | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\bzr | size = 8 | True | 2 | | | tj.pps.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\bzr | size = 4 | True | 2 | | | tj.pps.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\bzr | size = 256 | True | 1 | | | tj.pps.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\bzr | size = 65136 | True | 1 | | | tj.pps.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\bzr | size = 1024 | True | 1 | | | tj.pps | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\bzr | size = 65126 | True | 1 | | | tj.pps | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\lo4 | size = 8 | True | 2 | | | nczsaz.ots.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\lo4 | size = 4 | True | 2 | | | nczsaz.ots.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\lo4 | size = 256 | True | 1 | | | nczsaz.ots.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\lo4 | size = 19360 | True | 1 | | | nczsaz.ots.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\lo4 | size = 1024 | True | 1 | | | nczsaz.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\lo4 | size = 19360 | True | 1 | | | nczsaz.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\nqa | size = 8 | True | 2 | | | -xbh.odp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\nqa | size = 4 | True | 2 | | | -xbh.odp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\nqa | size = 256 | True | 1 | | | -xbh.odp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\nqa | size = 68992 | True | 1 | | | -xbh.odp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\nqa | size = 1024 | True | 1 | | | -xbh.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\nqa | size = 68985 | True | 1 | | | -xbh.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 8 | True | 2 | | | c-nspy xfvlw3\-nos.ods.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 4 | True | 2 | | | c-nspy xfvlw3\-nos.ods.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 256 | True | 1 | | | c-nspy xfvlw3\-nos.ods.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 12160 | True | 1 | | | c-nspy xfvlw3\-nos.ods.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 1024 | True | 1 | | | c-nspy xfvlw3\-nos.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 12159 | True | 1 | | | c-nspy xfvlw3\-nos.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 8 | True | 2 | | | c-nspy xfvlw3\axtg6ai5-.ods.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 4 | True | 2 | | | c-nspy xfvlw3\axtg6ai5-.ods.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 256 | True | 1 | | | c-nspy xfvlw3\axtg6ai5-.ods.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 55936 | True | 1 | | | c-nspy xfvlw3\axtg6ai5-.ods.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 1024 | True | 1 | | | c-nspy xfvlw3\axtg6ai5-.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 55924 | True | 1 | | | c-nspy xfvlw3\axtg6ai5-.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 8 | True | 2 | | | c-nspy xfvlw3\qz1senichq4fy3oijrd.ots.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 4 | True | 2 | | | c-nspy xfvlw3\qz1senichq4fy3oijrd.ots.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 256 | True | 1 | | | c-nspy xfvlw3\qz1senichq4fy3oijrd.ots.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 56992 | True | 1 | | | c-nspy xfvlw3\qz1senichq4fy3oijrd.ots.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 1024 | True | 1 | | | c-nspy xfvlw3\qz1senichq4fy3oijrd.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 56989 | True | 1 | | | c-nspy xfvlw3\qz1senichq4fy3oijrd.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows nt\msscan\welcomescan.j | size = 8 | True | 2 | | | pg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows nt\msscan\welcomescan.j | size = 4 | True | 2 | | | pg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows nt\msscan\welcomescan.j | size = 256 | True | 1 | | | pg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows nt\msscan\welcomescan.j | size = 516432 | True | 1 | | | pg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\internet explorer\b | size = 8 | True | 2 | | | rndlog.txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\internet explorer\b | size = 4 | True | 2 | | | rndlog.txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\internet explorer\b | size = 256 | True | 1 | | | rndlog.txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\internet explorer\b | size = 12192 | True | 1 | | | rndlog.txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 2 | | | nery\bears.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 4 | True | 2 | | | nery\bears.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 256 | True | 1 | | | nery\bears.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 1088 | True | 1 | | | nery\bears.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 2 | | | nery\garden.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 4 | True | 2 | | | nery\garden.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 256 | True | 1 | | | nery\garden.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 23872 | True | 1 | | | nery\garden.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 2 | | | nery\greenbubbles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 4 | True | 2 | | | nery\greenbubbles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 256 | True | 1 | | | nery\greenbubbles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 6416 | True | 1 | | | nery\greenbubbles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 2 | | | nery\handprints.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 4 | True | 2 | | | nery\handprints.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 256 | True | 1 | | | nery\handprints.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 4224 | True | 1 | | | nery\handprints.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 2 | | | nery\orangecircles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 4 | True | 2 | | | nery\orangecircles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 256 | True | 1 | | | nery\orangecircles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 6384 | True | 1 | | | nery\orangecircles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 2 | | | nery\peacock.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 4 | True | 2 | | | nery\peacock.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 256 | True | 1 | | | nery\peacock.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 5120 | True | 1 | | | nery\peacock.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 2 | | | nery\roses.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 4 | True | 2 | | | nery\roses.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 256 | True | 1 | | | nery\roses.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 1920 | True | 1 | | | nery\roses.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 2 | | | nery\shadesofblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 4 | True | 2 | | | nery\shadesofblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 256 | True | 1 | | | nery\shadesofblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 4736 | True | 1 | | | nery\shadesofblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 2 | | | nery\softblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 4 | True | 2 | | | nery\softblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 256 | True | 1 | | | nery\softblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 10576 | True | 1 | | | nery\softblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 2 | | | nery\stars.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 4 | True | 2 | | | nery\stars.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 256 | True | 1 | | | nery\stars.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 7520 | True | 1 | | | nery\stars.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\roaming\microsoft\windows\themes\tr | size = 8 | True | 2 | | | anscodedwallpaper.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\roaming\microsoft\windows\themes\tr | size = 4 | True | 2 | | | anscodedwallpaper.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\roaming\microsoft\windows\themes\tr | size = 256 | True | 1 | | | anscodedwallpaper.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\roaming\microsoft\windows\themes\tr | size = 637264 | True | 1 | | | anscodedwallpaper.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | size = 8 | True | 2 | | | r\brndlog.txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | size = 4 | True | 2 | | | r\brndlog.txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | size = 256 | True | 1 | | | r\brndlog.txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | size = 12192 | True | 1 | | | r\brndlog.txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 2 | | | tionery\bears.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 4 | True | 2 | | | tionery\bears.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 256 | True | 1 | | | tionery\bears.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 1088 | True | 1 | | | tionery\bears.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 2 | | | tionery\garden.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 4 | True | 2 | | | tionery\garden.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 256 | True | 1 | | | tionery\garden.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 23872 | True | 1 | | | tionery\garden.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 2 | | | tionery\greenbubbles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 4 | True | 2 | | | tionery\greenbubbles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 256 | True | 1 | | | tionery\greenbubbles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 6416 | True | 1 | | | tionery\greenbubbles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 2 | | | tionery\handprints.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 4 | True | 2 | | | tionery\handprints.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 256 | True | 1 | | | tionery\handprints.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 4224 | True | 1 | | | tionery\handprints.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 2 | | | tionery\orangecircles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 4 | True | 2 | | | tionery\orangecircles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 256 | True | 1 | | | tionery\orangecircles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 6384 | True | 1 | | | tionery\orangecircles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 2 | | | tionery\peacock.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 4 | True | 2 | | | tionery\peacock.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 256 | True | 1 | | | tionery\peacock.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 5120 | True | 1 | | | tionery\peacock.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 2 | | | tionery\roses.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 4 | True | 2 | | | tionery\roses.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 256 | True | 1 | | | tionery\roses.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 1920 | True | 1 | | | tionery\roses.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 2 | | | tionery\shadesofblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 4 | True | 2 | | | tionery\shadesofblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 256 | True | 1 | | | tionery\shadesofblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 4736 | True | 1 | | | tionery\shadesofblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 2 | | | tionery\softblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 4 | True | 2 | | | tionery\softblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 256 | True | 1 | | | tionery\softblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 10576 | True | 1 | | | tionery\softblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 2 | | | tionery\stars.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 4 | True | 2 | | | tionery\stars.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 256 | True | 1 | | | tionery\stars.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 7520 | True | 1 | | | tionery\stars.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\d56ie.csv.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\d56ie.csv.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\d56ie.csv.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\d56ie.csv.wncryt | size = 11232 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\dx-rnsk.jpg.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\dx-rnsk.jpg.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\dx-rnsk.jpg.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\dx-rnsk.jpg.wncryt | size = 48560 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ir5gaytbg.jpg.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ir5gaytbg.jpg.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ir5gaytbg.jpg.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ir5gaytbg.jpg.wncryt | size = 48912 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\mpx3v.xlsx.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\mpx3v.xlsx.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\mpx3v.xlsx.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\mpx3v.xlsx.wncryt | size = 26320 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\o7p_l.xls.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\o7p_l.xls.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\o7p_l.xls.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\o7p_l.xls.wncryt | size = 63280 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ozq_qxmblgn17n.pdf.wncry | size = 8 | True | 2 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ozq_qxmblgn17n.pdf.wncry | size = 4 | True | 2 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ozq_qxmblgn17n.pdf.wncry | size = 256 | True | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ozq_qxmblgn17n.pdf.wncry | size = 77696 | True | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\themes | size = 8 | True | 2 | | | \transcodedwallpaper.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\themes | size = 4 | True | 2 | | | \transcodedwallpaper.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\themes | size = 256 | True | 1 | | | \transcodedwallpaper.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\themes | size = 879408 | True | 1 | | | \transcodedwallpaper.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\55woz240.jpg.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\55woz240.jpg.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\55woz240.jpg.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\55woz240.jpg.wncryt | size = 89936 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\j5lndpj\rely_w0.jpg.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\j5lndpj\rely_w0.jpg.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\j5lndpj\rely_w0.jpg.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\j5lndpj\rely_w0.jpg.wncryt | size = 38656 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\j5lndpj\txokdckrvk.jpg.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\j5lndpj\txokdckrvk.jpg.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\j5lndpj\txokdckrvk.jpg.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\j5lndpj\txokdckrvk.jpg.wncryt | size = 90208 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\u0low_3k9h1go | size = 8 | True | 2 | | | py7.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\u0low_3k9h1go | size = 4 | True | 2 | | | py7.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\u0low_3k9h1go | size = 256 | True | 1 | | | py7.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\u0low_3k9h1go | size = 71904 | True | 1 | | | py7.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | size = 8 | True | 2 | | | \uvrcjvwuev0rc6u9m.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | size = 4 | True | 2 | | | \uvrcjvwuev0rc6u9m.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | size = 256 | True | 1 | | | \uvrcjvwuev0rc6u9m.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | size = 60256 | True | 1 | | | \uvrcjvwuev0rc6u9m.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\soyiwozbtzrklfzgmav.jpg. | size = 8 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\soyiwozbtzrklfzgmav.jpg. | size = 4 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\soyiwozbtzrklfzgmav.jpg. | size = 256 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\soyiwozbtzrklfzgmav.jpg. | size = 41456 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\chrysanthemum.jpg.w | size = 8 | True | 2 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\chrysanthemum.jpg.w | size = 4 | True | 2 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\chrysanthemum.jpg.w | size = 256 | True | 1 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\chrysanthemum.jpg.w | size = 879408 | True | 1 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\desert.jpg.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\desert.jpg.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\desert.jpg.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\desert.jpg.wncryt | size = 845952 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\hydrangeas.jpg.wncr | size = 8 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\hydrangeas.jpg.wncr | size = 4 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\hydrangeas.jpg.wncr | size = 256 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\hydrangeas.jpg.wncr | size = 595296 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\jellyfish.jpg.wncry | size = 8 | True | 2 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\jellyfish.jpg.wncry | size = 4 | True | 2 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\jellyfish.jpg.wncry | size = 256 | True | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\jellyfish.jpg.wncry | size = 775712 | True | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\koala.jpg.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\koala.jpg.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\koala.jpg.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\koala.jpg.wncryt | size = 780832 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\lighthouse.jpg.wncr | size = 8 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\lighthouse.jpg.wncr | size = 4 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\lighthouse.jpg.wncr | size = 256 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\lighthouse.jpg.wncr | size = 561280 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\penguins.jpg.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\penguins.jpg.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\penguins.jpg.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\penguins.jpg.wncryt | size = 777840 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\tulips.jpg.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\tulips.jpg.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\tulips.jpg.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\pictures\sample pictures\tulips.jpg.wncryt | size = 620896 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\bootsect.bak.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\bootsect.bak.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\bootsect.bak.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\bootsect.bak.wncryt | size = 8192 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 8 | True | 2 | | | 5d4-4b6f-b567-97838f1b04b0}\background.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 4 | True | 2 | | | 5d4-4b6f-b567-97838f1b04b0}\background.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 256 | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\background.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 129760 | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\background.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 8 | True | 2 | | | 5d4-4b6f-b567-97838f1b04b0}\device.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 4 | True | 2 | | | 5d4-4b6f-b567-97838f1b04b0}\device.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 256 | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\device.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 44496 | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\device.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 8 | True | 2 | | | 5d4-4b6f-b567-97838f1b04b0}\overlay.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 4 | True | 2 | | | 5d4-4b6f-b567-97838f1b04b0}\overlay.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 256 | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\overlay.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 28880 | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\overlay.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 8 | True | 2 | | | 5d4-4b6f-b567-97838f1b04b0}\superbar.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 4 | True | 2 | | | 5d4-4b6f-b567-97838f1b04b0}\superbar.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 256 | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\superbar.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 39392 | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\superbar.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{8702d817-5 | size = 8 | True | 2 | | | aad-4674-9ef3-4d3decd87120}\background.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{8702d817-5 | size = 4 | True | 2 | | | aad-4674-9ef3-4d3decd87120}\background.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{8702d817-5 | size = 256 | True | 1 | | | aad-4674-9ef3-4d3decd87120}\background.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{8702d817-5 | size = 129760 | True | 1 | | | aad-4674-9ef3-4d3decd87120}\background.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{8702d817-5 | size = 8 | True | 2 | | | aad-4674-9ef3-4d3decd87120}\watermark.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{8702d817-5 | size = 4 | True | 2 | | | aad-4674-9ef3-4d3decd87120}\watermark.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{8702d817-5 | size = 256 | True | 1 | | | aad-4674-9ef3-4d3decd87120}\watermark.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\device stage\device\{8702d817-5 | size = 28880 | True | 1 | | | aad-4674-9ef3-4d3decd87120}\watermark.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\search\data\applications\window | size = 8 | True | 2 | | | s\windows.edb.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\search\data\applications\window | size = 4 | True | 2 | | | s\windows.edb.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\search\data\applications\window | size = 256 | True | 1 | | | s\windows.edb.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\search\data\applications\window | size = 1048576 | True | 40 | | | s\windows.edb.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\search\data\applications\window | size = 65536 | True | 1 | | | s\windows.edb.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\guest.bmp | size = 8 | True | 2 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\guest.bmp | size = 4 | True | 2 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\guest.bmp | size = 256 | True | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\guest.bmp | size = 49216 | True | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\user.bmp. | size = 8 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\user.bmp. | size = 4 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\user.bmp. | size = 256 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\user.bmp. | size = 49216 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile10.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile10.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile10.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile10.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile11.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile11.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile11.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile11.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile12.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile12.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile12.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile12.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile13.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile13.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile13.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 48832 | True | 1 | | | ictures\usertile13.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile14.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile14.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile14.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile14.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile15.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile15.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile15.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile15.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile16.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile16.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile16.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile16.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile17.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile17.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile17.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile17.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile18.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile18.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile18.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile18.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile19.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile19.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile19.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile19.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile20.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile20.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile20.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile20.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile21.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile21.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile21.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile21.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile22.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile22.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile22.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile22.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile23.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile23.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile23.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile23.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile24.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile24.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile24.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile24.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile25.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile25.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile25.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile25.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile26.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile26.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile26.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile26.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile27.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile27.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile27.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile27.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile28.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile28.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile28.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile28.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile29.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile29.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile29.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile29.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile30.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile30.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile30.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile30.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile31.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile31.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile31.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile31.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile32.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile32.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile32.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile32.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile33.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile33.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile33.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile33.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile34.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile34.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile34.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile34.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile35.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile35.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile35.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile35.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile36.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile36.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile36.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile36.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile37.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile37.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile37.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile37.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile38.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile38.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile38.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile38.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile39.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile39.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile39.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile39.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile40.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile40.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile40.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile40.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile41.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile41.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile41.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile41.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile42.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile42.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile42.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile42.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile43.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile43.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile43.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile43.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 2 | | | ictures\usertile44.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 4 | True | 2 | | | ictures\usertile44.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 256 | True | 1 | | | ictures\usertile44.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\user account pictures\default p | size = 49216 | True | 1 | | | ictures\usertile44.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\cversions.2.db.w | size = 8 | True | 2 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\cversions.2.db.w | size = 4 | True | 2 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\cversions.2.db.w | size = 256 | True | 1 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\cversions.2.db.w | size = 16384 | True | 1 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{67d69890-d853-4 | size = 8 | True | 2 | | | 011-a87e-aa64fa83ce5a}.2.ver0x0000000000000002.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{67d69890-d853-4 | size = 4 | True | 2 | | | 011-a87e-aa64fa83ce5a}.2.ver0x0000000000000002.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{67d69890-d853-4 | size = 256 | True | 1 | | | 011-a87e-aa64fa83ce5a}.2.ver0x0000000000000002.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{67d69890-d853-4 | size = 2320 | True | 1 | | | 011-a87e-aa64fa83ce5a}.2.ver0x0000000000000002.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 8 | True | 2 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000004.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 4 | True | 2 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000004.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 256 | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000004.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 192656 | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000004.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 8 | True | 2 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 4 | True | 2 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 256 | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 191120 | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 8 | True | 2 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000006.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 4 | True | 2 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000006.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 256 | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000006.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 191120 | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000006.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 8 | True | 2 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000007.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 4 | True | 2 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000007.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 256 | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000007.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 192656 | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000007.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{7cd55808-3d38-4 | size = 8 | True | 2 | | | dd5-90c9-62f0e6ee60d4}.2.ver0x0000000000000001.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{7cd55808-3d38-4 | size = 4 | True | 2 | | | dd5-90c9-62f0e6ee60d4}.2.ver0x0000000000000001.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{7cd55808-3d38-4 | size = 256 | True | 1 | | | dd5-90c9-62f0e6ee60d4}.2.ver0x0000000000000001.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{7cd55808-3d38-4 | size = 2320 | True | 1 | | | dd5-90c9-62f0e6ee60d4}.2.ver0x0000000000000001.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{ddf571f2-be98-4 | size = 8 | True | 2 | | | 26d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{ddf571f2-be98-4 | size = 4 | True | 2 | | | 26d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{ddf571f2-be98-4 | size = 256 | True | 1 | | | 26d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\caches\{ddf571f2-be98-4 | size = 415104 | True | 1 | | | 26d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 01.w | size = 8 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 01.w | size = 4 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 01.w | size = 256 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 01.w | size = 201840 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 02.w | size = 8 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 02.w | size = 4 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 02.w | size = 256 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 02.w | size = 139200 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 03.w | size = 8 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 03.w | size = 4 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 03.w | size = 256 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 03.w | size = 94464 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 04.w | size = 8 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 04.w | size = 4 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 04.w | size = 256 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 04.w | size = 237632 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 05.w | size = 8 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 05.w | size = 4 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 05.w | size = 256 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 05.w | size = 112368 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 06.w | size = 8 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 06.w | size = 4 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 06.w | size = 256 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 06.w | size = 94464 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 07.w | size = 8 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 07.w | size = 4 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 07.w | size = 256 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 07.w | size = 94464 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 08.w | size = 8 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 08.w | size = 4 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 08.w | size = 256 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 08.w | size = 139200 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 09.w | size = 8 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 09.w | size = 4 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 09.w | size = 256 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 09.w | size = 112368 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 10.w | size = 8 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 10.w | size = 4 | True | 2 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 10.w | size = 256 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows\ringtones\ringtone 10.w | size = 94464 | True | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\e | size = 8 | True | 2 | | | n-us\welcomefax.tif.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\e | size = 4 | True | 2 | | | n-us\welcomefax.tif.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\e | size = 256 | True | 1 | | | n-us\welcomefax.tif.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\e | size = 89536 | True | 1 | | | n-us\welcomefax.tif.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\iconcache.db.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\iconcache.db.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\iconcache.db.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\iconcache.db.wncryt | size = 776144 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 8 | True | 2 | | | umbcache_256.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 4 | True | 2 | | | umbcache_256.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 256 | True | 1 | | | umbcache_256.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 1048576 | True | 1 | | | umbcache_256.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 8 | True | 2 | | | umbcache_idx.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 4 | True | 2 | | | umbcache_idx.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 256 | True | 1 | | | umbcache_idx.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 3264 | True | 1 | | | umbcache_idx.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\iconcache.db.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\iconcache.db.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\iconcache.db.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\iconcache.db.wncryt | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\iconcache.db.wncryt | size = 870512 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | size = 8 | True | 2 | | | r\brndlog.bak.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | size = 4 | True | 2 | | | r\brndlog.bak.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | size = 256 | True | 1 | | | r\brndlog.bak.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | size = 12192 | True | 1 | | | r\brndlog.bak.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\c | size = 8 | True | 2 | | | versions.1.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\c | size = 4 | True | 2 | | | versions.1.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\c | size = 256 | True | 1 | | | versions.1.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\c | size = 16384 | True | 1 | | | versions.1.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | size = 8 | True | 2 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000 | | | | | | f.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | size = 4 | True | 2 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000 | | | | | | f.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | size = 256 | True | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000 | | | | | | f.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | size = 106432 | True | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000 | | | | | | f.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | size = 8 | True | 2 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001 | | | | | | 0.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | size = 4 | True | 2 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001 | | | | | | 0.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | size = 256 | True | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001 | | | | | | 0.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | size = 164944 | True | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001 | | | | | | 0.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 8 | True | 2 | | | \thumbcache_256.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 4 | True | 2 | | | \thumbcache_256.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 256 | True | 1 | | | \thumbcache_256.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 1048576 | True | 2 | | | \thumbcache_256.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 8 | True | 2 | | | \thumbcache_32.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 4 | True | 2 | | | \thumbcache_32.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 256 | True | 1 | | | \thumbcache_32.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 1048576 | True | 1 | | | \thumbcache_32.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 8 | True | 2 | | | \thumbcache_96.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 4 | True | 2 | | | \thumbcache_96.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 256 | True | 1 | | | \thumbcache_96.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 1048576 | True | 1 | | | \thumbcache_96.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 8 | True | 2 | | | \thumbcache_idx.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 4 | True | 2 | | | \thumbcache_idx.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 256 | True | 1 | | | \thumbcache_idx.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 6496 | True | 1 | | | \thumbcache_idx.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\bp7n0_qwtwkorxg.mp3.wncr | size = 8 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\bp7n0_qwtwkorxg.mp3.wncr | size = 4 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\bp7n0_qwtwkorxg.mp3.wncr | size = 256 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\bp7n0_qwtwkorxg.mp3.wncr | size = 62128 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\bywi0qluwl3w9bud5f3o.gif | size = 8 | True | 2 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\bywi0qluwl3w9bud5f3o.gif | size = 4 | True | 2 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\bywi0qluwl3w9bud5f3o.gif | size = 256 | True | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\bywi0qluwl3w9bud5f3o.gif | size = 84592 | True | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\dayij9-o1e8.bmp.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\dayij9-o1e8.bmp.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\dayij9-o1e8.bmp.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\dayij9-o1e8.bmp.wncryt | size = 16080 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\dhlstwctu20.swf.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\dhlstwctu20.swf.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\dhlstwctu20.swf.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\dhlstwctu20.swf.wncryt | size = 71584 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\djlklpzvvty.swf.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\djlklpzvvty.swf.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\djlklpzvvty.swf.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\djlklpzvvty.swf.wncryt | size = 20400 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\dz0vptp5owvhzt.bmp.wncry | size = 8 | True | 2 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\dz0vptp5owvhzt.bmp.wncry | size = 4 | True | 2 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\dz0vptp5owvhzt.bmp.wncry | size = 256 | True | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\dz0vptp5owvhzt.bmp.wncry | size = 41600 | True | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\g2kjjoggr_cgbs8b.flv.wnc | size = 8 | True | 2 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\g2kjjoggr_cgbs8b.flv.wnc | size = 4 | True | 2 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\g2kjjoggr_cgbs8b.flv.wnc | size = 256 | True | 1 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\g2kjjoggr_cgbs8b.flv.wnc | size = 102096 | True | 1 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\g_iap-kg5-s.wav.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\g_iap-kg5-s.wav.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\g_iap-kg5-s.wav.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\g_iap-kg5-s.wav.wncryt | size = 12576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\jqzjf0k.bmp.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\jqzjf0k.bmp.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\jqzjf0k.bmp.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\jqzjf0k.bmp.wncryt | size = 80512 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\mhjvg24dofm.pps.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\mhjvg24dofm.pps.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\mhjvg24dofm.pps.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\mhjvg24dofm.pps.wncryt | size = 1296 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\nrae.png.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\nrae.png.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\nrae.png.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\nrae.png.wncryt | size = 12208 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\o8fcddpbkgpe-.swf.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\o8fcddpbkgpe-.swf.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\o8fcddpbkgpe-.swf.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\o8fcddpbkgpe-.swf.wncryt | size = 52544 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ojefr7lfa6sgok2mjmm.mp3. | size = 8 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ojefr7lfa6sgok2mjmm.mp3. | size = 4 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ojefr7lfa6sgok2mjmm.mp3. | size = 256 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ojefr7lfa6sgok2mjmm.mp3. | size = 100224 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\orfn2vwitjww5.bmp.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\orfn2vwitjww5.bmp.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\orfn2vwitjww5.bmp.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\orfn2vwitjww5.bmp.wncryt | size = 36960 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ph1dzo_.png.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ph1dzo_.png.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ph1dzo_.png.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ph1dzo_.png.wncryt | size = 35792 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\qq1a2p8piiy_edbcli.mkv.w | size = 8 | True | 2 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\qq1a2p8piiy_edbcli.mkv.w | size = 4 | True | 2 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\qq1a2p8piiy_edbcli.mkv.w | size = 256 | True | 1 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\qq1a2p8piiy_edbcli.mkv.w | size = 2768 | True | 1 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\qwg2cvfqc9ez1jca.mp3.wnc | size = 8 | True | 2 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\qwg2cvfqc9ez1jca.mp3.wnc | size = 4 | True | 2 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\qwg2cvfqc9ez1jca.mp3.wnc | size = 256 | True | 1 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\qwg2cvfqc9ez1jca.mp3.wnc | size = 61616 | True | 1 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ra-n6lubasx5.swf.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ra-n6lubasx5.swf.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ra-n6lubasx5.swf.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ra-n6lubasx5.swf.wncryt | size = 40896 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\rjwem.avi.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\rjwem.avi.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\rjwem.avi.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\rjwem.avi.wncryt | size = 29872 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\sh5e3mmjvux.mkv.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\sh5e3mmjvux.mkv.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\sh5e3mmjvux.mkv.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\sh5e3mmjvux.mkv.wncryt | size = 20160 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\sl9ersroh9zeq.png.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\sl9ersroh9zeq.png.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\sl9ersroh9zeq.png.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\sl9ersroh9zeq.png.wncryt | size = 35280 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\uaebzgeiegneodnlxncn.mkv | size = 8 | True | 2 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\uaebzgeiegneodnlxncn.mkv | size = 4 | True | 2 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\uaebzgeiegneodnlxncn.mkv | size = 256 | True | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\uaebzgeiegneodnlxncn.mkv | size = 19664 | True | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ultbjg f.pps.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ultbjg f.pps.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ultbjg f.pps.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\ultbjg f.pps.wncryt | size = 26080 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\uywba9uh15vmu3etzhh-.mkv | size = 8 | True | 2 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\uywba9uh15vmu3etzhh-.mkv | size = 4 | True | 2 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\uywba9uh15vmu3etzhh-.mkv | size = 256 | True | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\uywba9uh15vmu3etzhh-.mkv | size = 65856 | True | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\vsm1crhdjx95vtws.flv.wnc | size = 8 | True | 2 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\vsm1crhdjx95vtws.flv.wnc | size = 4 | True | 2 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\vsm1crhdjx95vtws.flv.wnc | size = 256 | True | 1 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\vsm1crhdjx95vtws.flv.wnc | size = 37088 | True | 1 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\wgxrl2.odt.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\wgxrl2.odt.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\wgxrl2.odt.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\wgxrl2.odt.wncryt | size = 5808 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\xdsqx_wxf9k9q.bmp.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\xdsqx_wxf9k9q.bmp.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\xdsqx_wxf9k9q.bmp.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\xdsqx_wxf9k9q.bmp.wncryt | size = 23744 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\xf1j6kjktjpo ac8gr6.ots. | size = 8 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\xf1j6kjktjpo ac8gr6.ots. | size = 4 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\xf1j6kjktjpo ac8gr6.ots. | size = 256 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\xf1j6kjktjpo ac8gr6.ots. | size = 31104 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\zmej2xz6d3on_bh9gk7g.wav | size = 8 | True | 2 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\zmej2xz6d3on_bh9gk7g.wav | size = 4 | True | 2 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\zmej2xz6d3on_bh9gk7g.wav | size = 256 | True | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\zmej2xz6d3on_bh9gk7g.wav | size = 26160 | True | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\dfkh.wav.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\dfkh.wav.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\dfkh.wav.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\dfkh.wav.wncryt | size = 31600 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\hmdiztpptjk3.wav.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\hmdiztpptjk3.wav.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\hmdiztpptjk3.wav.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\hmdiztpptjk3.wav.wncryt | size = 55360 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\zptabq.mp3.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\zptabq.mp3.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\zptabq.mp3.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\zptabq.mp3.wncryt | size = 89696 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\lk-vjlkc3mbxebkrauk.wa | size = 8 | True | 2 | | | v.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\lk-vjlkc3mbxebkrauk.wa | size = 4 | True | 2 | | | v.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\lk-vjlkc3mbxebkrauk.wa | size = 256 | True | 1 | | | v.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\lk-vjlkc3mbxebkrauk.wa | size = 9696 | True | 1 | | | v.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\9 bxr.wav.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\9 bxr.wav.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\9 bxr.wav.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\9 bxr.wav.wncryt | size = 23952 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\bm1lj1elmahv.wav. | size = 8 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\bm1lj1elmahv.wav. | size = 4 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\bm1lj1elmahv.wav. | size = 256 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\bm1lj1elmahv.wav. | size = 80768 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\hwq_e63aib.wav.wn | size = 8 | True | 2 | | | cryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\hwq_e63aib.wav.wn | size = 4 | True | 2 | | | cryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\hwq_e63aib.wav.wn | size = 256 | True | 1 | | | cryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\hwq_e63aib.wav.wn | size = 73008 | True | 1 | | | cryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\qni_.mp3.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\qni_.mp3.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\qni_.mp3.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\qni_.mp3.wncryt | size = 74784 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\zhvacu3zm4pi0lqv. | size = 8 | True | 2 | | | mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\zhvacu3zm4pi0lqv. | size = 4 | True | 2 | | | mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\zhvacu3zm4pi0lqv. | size = 256 | True | 1 | | | mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\zhvacu3zm4pi0lqv. | size = 90640 | True | 1 | | | mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\0qrd5fx.mp3.wn | size = 8 | True | 2 | | | cryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\0qrd5fx.mp3.wn | size = 4 | True | 2 | | | cryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\0qrd5fx.mp3.wn | size = 256 | True | 1 | | | cryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\0qrd5fx.mp3.wn | size = 80400 | True | 1 | | | cryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\vox09umk.mp3.w | size = 8 | True | 2 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\vox09umk.mp3.w | size = 4 | True | 2 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\vox09umk.mp3.w | size = 256 | True | 1 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\vox09umk.mp3.w | size = 83888 | True | 1 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\2reugw.wav.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\2reugw.wav.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\2reugw.wav.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\2reugw.wav.wncryt | size = 64368 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\4sarhcvjd04q.mp3. | size = 8 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\4sarhcvjd04q.mp3. | size = 4 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\4sarhcvjd04q.mp3. | size = 256 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\4sarhcvjd04q.mp3. | size = 9280 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\9z_ehnks.wav.wncr | size = 8 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\9z_ehnks.wav.wncr | size = 4 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\9z_ehnks.wav.wncr | size = 256 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\9z_ehnks.wav.wncr | size = 7856 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\c5alotv4.wav.wncr | size = 8 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\c5alotv4.wav.wncr | size = 4 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\c5alotv4.wav.wncr | size = 256 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\c5alotv4.wav.wncr | size = 2800 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\kfqjlmnelq.mp3.wn | size = 8 | True | 2 | | | cryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\kfqjlmnelq.mp3.wn | size = 4 | True | 2 | | | cryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\kfqjlmnelq.mp3.wn | size = 256 | True | 1 | | | cryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\kfqjlmnelq.mp3.wn | size = 44848 | True | 1 | | | cryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\mlx4g8dg4dbcwao4. | size = 8 | True | 2 | | | wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\mlx4g8dg4dbcwao4. | size = 4 | True | 2 | | | wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\mlx4g8dg4dbcwao4. | size = 256 | True | 1 | | | wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\mlx4g8dg4dbcwao4. | size = 36448 | True | 1 | | | wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\0-sd9l8u\dji4emfc | size = 8 | True | 2 | | | xz9.wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\0-sd9l8u\dji4emfc | size = 4 | True | 2 | | | xz9.wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\0-sd9l8u\dji4emfc | size = 256 | True | 1 | | | xz9.wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\0-sd9l8u\dji4emfc | size = 56672 | True | 1 | | | xz9.wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\r4lsao\csxh-dp0pz | size = 8 | True | 2 | | | vfbfnnd.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\r4lsao\csxh-dp0pz | size = 4 | True | 2 | | | vfbfnnd.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\r4lsao\csxh-dp0pz | size = 256 | True | 1 | | | vfbfnnd.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\r4lsao\csxh-dp0pz | size = 49472 | True | 1 | | | vfbfnnd.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\gi9i | size = 8 | True | 2 | | | p_csel.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\gi9i | size = 4 | True | 2 | | | p_csel.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\gi9i | size = 256 | True | 1 | | | p_csel.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\gi9i | size = 59152 | True | 1 | | | p_csel.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\s9_2 | size = 8 | True | 2 | | | q.wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\s9_2 | size = 4 | True | 2 | | | q.wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\s9_2 | size = 256 | True | 1 | | | q.wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\s9_2 | size = 25776 | True | 1 | | | q.wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\xysc | size = 8 | True | 2 | | | fw4.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\xysc | size = 4 | True | 2 | | | fw4.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\xysc | size = 256 | True | 1 | | | fw4.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\xysc | size = 93472 | True | 1 | | | fw4.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\aicirck.gif.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\aicirck.gif.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\aicirck.gif.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\aicirck.gif.wncryt | size = 7680 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\drba.bmp.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\drba.bmp.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\drba.bmp.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\drba.bmp.wncryt | size = 27104 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\eszy hkfdwfx0.bmp.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\eszy hkfdwfx0.bmp.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\eszy hkfdwfx0.bmp.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\eszy hkfdwfx0.bmp.wncryt | size = 10720 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\imjwbtsshxgloi.gif.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\imjwbtsshxgloi.gif.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\imjwbtsshxgloi.gif.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\imjwbtsshxgloi.gif.wncryt | size = 12496 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\n5vvg0h1npv.bmp.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\n5vvg0h1npv.bmp.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\n5vvg0h1npv.bmp.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\n5vvg0h1npv.bmp.wncryt | size = 91072 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\pwvh0sxs 4u.gif.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\pwvh0sxs 4u.gif.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\pwvh0sxs 4u.gif.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\pwvh0sxs 4u.gif.wncryt | size = 49264 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\r9tluytrypiqhwf.gif.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\r9tluytrypiqhwf.gif.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\r9tluytrypiqhwf.gif.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\r9tluytrypiqhwf.gif.wncryt | size = 97056 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_y79.bmp.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_y79.bmp.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_y79.bmp.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_y79.bmp.wncryt | size = 13200 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\j5lndpj\5he-bihy791udb060xb.gif | size = 8 | True | 2 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\j5lndpj\5he-bihy791udb060xb.gif | size = 4 | True | 2 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\j5lndpj\5he-bihy791udb060xb.gif | size = 256 | True | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\j5lndpj\5he-bihy791udb060xb.gif | size = 33424 | True | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\j5lndpj\jgg9piy6c.bmp.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\j5lndpj\jgg9piy6c.bmp.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\j5lndpj\jgg9piy6c.bmp.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\j5lndpj\jgg9piy6c.bmp.wncryt | size = 9104 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\4r2l.png.wncr | size = 8 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\4r2l.png.wncr | size = 4 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\4r2l.png.wncr | size = 256 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\4r2l.png.wncr | size = 21280 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\wosctyozygi-. | size = 8 | True | 2 | | | png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\wosctyozygi-. | size = 4 | True | 2 | | | png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\wosctyozygi-. | size = 256 | True | 1 | | | png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\wosctyozygi-. | size = 96736 | True | 1 | | | png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\d0ifk_s5cqbrv.png.wncr | size = 8 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\d0ifk_s5cqbrv.png.wncr | size = 4 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\d0ifk_s5cqbrv.png.wncr | size = 256 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\d0ifk_s5cqbrv.png.wncr | size = 81456 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\h pgorp n6u.bmp.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\h pgorp n6u.bmp.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\h pgorp n6u.bmp.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\h pgorp n6u.bmp.wncryt | size = 43824 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\rgfjlx032dp7.gif.wncry | size = 8 | True | 2 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\rgfjlx032dp7.gif.wncry | size = 4 | True | 2 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\rgfjlx032dp7.gif.wncry | size = 256 | True | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\rgfjlx032dp7.gif.wncry | size = 78864 | True | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\wu4tbykxf6k0p.bmp.wncr | size = 8 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\wu4tbykxf6k0p.bmp.wncr | size = 4 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\wu4tbykxf6k0p.bmp.wncr | size = 256 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\wu4tbykxf6k0p.bmp.wncr | size = 42240 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\xqj6y5vsd79ypdjyjlfn.p | size = 8 | True | 2 | | | ng.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\xqj6y5vsd79ypdjyjlfn.p | size = 4 | True | 2 | | | ng.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\xqj6y5vsd79ypdjyjlfn.p | size = 256 | True | 1 | | | ng.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\xqj6y5vsd79ypdjyjlfn.p | size = 5376 | True | 1 | | | ng.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\zlpvbnitdrc.png.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\zlpvbnitdrc.png.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\zlpvbnitdrc.png.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\zlpvbnitdrc.png.wncryt | size = 87424 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\_nmlicbf8j8nqyjj7kp.bm | size = 8 | True | 2 | | | p.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\_nmlicbf8j8nqyjj7kp.bm | size = 4 | True | 2 | | | p.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\_nmlicbf8j8nqyjj7kp.bm | size = 256 | True | 1 | | | p.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\_nmlicbf8j8nqyjj7kp.bm | size = 42128 | True | 1 | | | p.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\2bzr.gif.wncry | size = 8 | True | 2 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\2bzr.gif.wncry | size = 4 | True | 2 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\2bzr.gif.wncry | size = 256 | True | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\2bzr.gif.wncry | size = 84736 | True | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\khl4ego4d 5rt4 | size = 8 | True | 2 | | | l.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\khl4ego4d 5rt4 | size = 4 | True | 2 | | | l.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\khl4ego4d 5rt4 | size = 256 | True | 1 | | | l.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\khl4ego4d 5rt4 | size = 96784 | True | 1 | | | l.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\spxsplgrt3p.pn | size = 8 | True | 2 | | | g.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\spxsplgrt3p.pn | size = 4 | True | 2 | | | g.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\spxsplgrt3p.pn | size = 256 | True | 1 | | | g.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\spxsplgrt3p.pn | size = 100176 | True | 1 | | | g.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\xyz8ce1lhaimq. | size = 8 | True | 2 | | | gif.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\xyz8ce1lhaimq. | size = 4 | True | 2 | | | gif.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\xyz8ce1lhaimq. | size = 256 | True | 1 | | | gif.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\xyz8ce1lhaimq. | size = 54304 | True | 1 | | | gif.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\awko | size = 8 | True | 2 | | | rjfj_tbwlbiowt.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\awko | size = 4 | True | 2 | | | rjfj_tbwlbiowt.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\awko | size = 256 | True | 1 | | | rjfj_tbwlbiowt.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\awko | size = 7632 | True | 1 | | | rjfj_tbwlbiowt.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\mnu7 | size = 8 | True | 2 | | | k.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\mnu7 | size = 4 | True | 2 | | | k.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\mnu7 | size = 256 | True | 1 | | | k.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\mnu7 | size = 41280 | True | 1 | | | k.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\oxdt | size = 8 | True | 2 | | | .png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\oxdt | size = 4 | True | 2 | | | .png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\oxdt | size = 256 | True | 1 | | | .png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\oxdt | size = 87824 | True | 1 | | | .png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | size = 8 | True | 2 | | | \mhanq6ms_jz ssx.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | size = 4 | True | 2 | | | \mhanq6ms_jz ssx.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | size = 256 | True | 1 | | | \mhanq6ms_jz ssx.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | size = 69680 | True | 1 | | | \mhanq6ms_jz ssx.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\8r-qyt.png.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\8r-qyt.png.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\8r-qyt.png.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\8r-qyt.png.wncryt | size = 45392 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\ddw1j2dvm.bmp.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\ddw1j2dvm.bmp.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\ddw1j2dvm.bmp.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\ddw1j2dvm.bmp.wncryt | size = 39616 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\ehtgsx0.bmp.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\ehtgsx0.bmp.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\ehtgsx0.bmp.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\ehtgsx0.bmp.wncryt | size = 19952 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\oiputxj.png.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\oiputxj.png.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\oiputxj.png.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\oiputxj.png.wncryt | size = 95712 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\wxqsaaq6i.gif.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\wxqsaaq6i.gif.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\wxqsaaq6i.gif.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\pictures\_2hzdo\wxqsaaq6i.gif.wncryt | size = 18128 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\0rt9n7waqqvk6-s.swf.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\0rt9n7waqqvk6-s.swf.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\0rt9n7waqqvk6-s.swf.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\0rt9n7waqqvk6-s.swf.wncryt | size = 34528 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\gls-an3bnb6su.mkv.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\gls-an3bnb6su.mkv.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\gls-an3bnb6su.mkv.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\gls-an3bnb6su.mkv.wncryt | size = 12048 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hi-kh7n3amacgd.mkv.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hi-kh7n3amacgd.mkv.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hi-kh7n3amacgd.mkv.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hi-kh7n3amacgd.mkv.wncryt | size = 84160 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\ouvp28f9ewmi29.swf.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\ouvp28f9ewmi29.swf.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\ouvp28f9ewmi29.swf.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\ouvp28f9ewmi29.swf.wncryt | size = 43056 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\rlh2om7hsceo6pzume.swf.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\rlh2om7hsceo6pzume.swf.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\rlh2om7hsceo6pzume.swf.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\rlh2om7hsceo6pzume.swf.wncryt | size = 9216 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\676ht6zbx.mkv. | size = 8 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\676ht6zbx.mkv. | size = 4 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\676ht6zbx.mkv. | size = 256 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\676ht6zbx.mkv. | size = 14176 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\929sjpu-xrkj3e | size = 8 | True | 2 | | | 1t9j7.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\929sjpu-xrkj3e | size = 4 | True | 2 | | | 1t9j7.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\929sjpu-xrkj3e | size = 256 | True | 1 | | | 1t9j7.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\929sjpu-xrkj3e | size = 45120 | True | 1 | | | 1t9j7.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\bcyq1.flv.wncr | size = 8 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\bcyq1.flv.wncr | size = 4 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\bcyq1.flv.wncr | size = 256 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\bcyq1.flv.wncr | size = 64800 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\hve _ffgg.avi. | size = 8 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\hve _ffgg.avi. | size = 4 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\hve _ffgg.avi. | size = 256 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\hve _ffgg.avi. | size = 75648 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\oia-6xvkp.swf. | size = 8 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\oia-6xvkp.swf. | size = 4 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\oia-6xvkp.swf. | size = 256 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\oia-6xvkp.swf. | size = 61248 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\peij538fk.mp4. | size = 8 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\peij538fk.mp4. | size = 4 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\peij538fk.mp4. | size = 256 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\peij538fk.mp4. | size = 89520 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\2iw7k-.mkv.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\2iw7k-.mkv.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\2iw7k-.mkv.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\2iw7k-.mkv.wncryt | size = 77008 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\kdlazanuxnjlg4yrhvf | size = 8 | True | 2 | | | q.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\kdlazanuxnjlg4yrhvf | size = 4 | True | 2 | | | q.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\kdlazanuxnjlg4yrhvf | size = 256 | True | 1 | | | q.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\kdlazanuxnjlg4yrhvf | size = 96560 | True | 1 | | | q.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\l1fq7b itpwhhcdab05 | size = 8 | True | 2 | | | u.avi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\l1fq7b itpwhhcdab05 | size = 4 | True | 2 | | | u.avi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\l1fq7b itpwhhcdab05 | size = 256 | True | 1 | | | u.avi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\l1fq7b itpwhhcdab05 | size = 87008 | True | 1 | | | u.avi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\lhhbjhevi.mkv.wncry | size = 8 | True | 2 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\lhhbjhevi.mkv.wncry | size = 4 | True | 2 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\lhhbjhevi.mkv.wncry | size = 256 | True | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\lhhbjhevi.mkv.wncry | size = 58304 | True | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\milwbj.flv.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\milwbj.flv.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\milwbj.flv.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\milwbj.flv.wncryt | size = 13376 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\mr1ex3.swf.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\mr1ex3.swf.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\mr1ex3.swf.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\mr1ex3.swf.wncryt | size = 17568 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\vc2cl4ln.mkv.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\vc2cl4ln.mkv.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\vc2cl4ln.mkv.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\hakyslty-m-z9\vc2cl4ln.mkv.wncryt | size = 76352 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\4oj9yfl3dn.flv.wncr | size = 8 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\4oj9yfl3dn.flv.wncr | size = 4 | True | 2 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\4oj9yfl3dn.flv.wncr | size = 256 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\4oj9yfl3dn.flv.wncr | size = 72896 | True | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\agmtjgfx.mkv.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\agmtjgfx.mkv.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\agmtjgfx.mkv.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\agmtjgfx.mkv.wncryt | size = 63824 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\hsbc.mkv.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\hsbc.mkv.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\hsbc.mkv.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\hsbc.mkv.wncryt | size = 54576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\hwj0zzo_r1q_pfff2.a | size = 8 | True | 2 | | | vi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\hwj0zzo_r1q_pfff2.a | size = 4 | True | 2 | | | vi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\hwj0zzo_r1q_pfff2.a | size = 256 | True | 1 | | | vi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\hwj0zzo_r1q_pfff2.a | size = 92064 | True | 1 | | | vi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\kj9gatk fbtmtzat.sw | size = 8 | True | 2 | | | f.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\kj9gatk fbtmtzat.sw | size = 4 | True | 2 | | | f.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\kj9gatk fbtmtzat.sw | size = 256 | True | 1 | | | f.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\kj9gatk fbtmtzat.sw | size = 31680 | True | 1 | | | f.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\nbuaos9o4zd04f6rvgq | size = 8 | True | 2 | | | y.swf.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\nbuaos9o4zd04f6rvgq | size = 4 | True | 2 | | | y.swf.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\nbuaos9o4zd04f6rvgq | size = 256 | True | 1 | | | y.swf.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\nbuaos9o4zd04f6rvgq | size = 86384 | True | 1 | | | y.swf.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\rh6x.mp4.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\rh6x.mp4.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\rh6x.mp4.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\rh6x.mp4.wncryt | size = 80928 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\_akuod4i4xu431o1mvn | size = 8 | True | 2 | | | e.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\_akuod4i4xu431o1mvn | size = 4 | True | 2 | | | e.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\_akuod4i4xu431o1mvn | size = 256 | True | 1 | | | e.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\_akuod4i4xu431o1mvn | size = 71184 | True | 1 | | | e.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\gdhhhwnb.flv.w | size = 8 | True | 2 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\gdhhhwnb.flv.w | size = 4 | True | 2 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\gdhhhwnb.flv.w | size = 256 | True | 1 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\gdhhhwnb.flv.w | size = 46112 | True | 1 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\t0_1iokbd.swf. | size = 8 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\t0_1iokbd.swf. | size = 4 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\t0_1iokbd.swf. | size = 256 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\t0_1iokbd.swf. | size = 14368 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\vbvvvvb4i.mkv. | size = 8 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\vbvvvvb4i.mkv. | size = 4 | True | 2 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\vbvvvvb4i.mkv. | size = 256 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\vbvvvvb4i.mkv. | size = 28720 | True | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ydjjqoani2hety | size = 8 | True | 2 | | | 5e.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ydjjqoani2hety | size = 4 | True | 2 | | | 5e.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ydjjqoani2hety | size = 256 | True | 1 | | | 5e.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ydjjqoani2hety | size = 73728 | True | 1 | | | 5e.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 8 | True | 2 | | | fq8j\87xpzn.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 4 | True | 2 | | | fq8j\87xpzn.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 256 | True | 1 | | | fq8j\87xpzn.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 48944 | True | 1 | | | fq8j\87xpzn.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 8 | True | 2 | | | fq8j\dd3qogjnlsgkg1--_vs.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 4 | True | 2 | | | fq8j\dd3qogjnlsgkg1--_vs.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 256 | True | 1 | | | fq8j\dd3qogjnlsgkg1--_vs.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 5408 | True | 1 | | | fq8j\dd3qogjnlsgkg1--_vs.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 8 | True | 2 | | | fq8j\djqc-.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 4 | True | 2 | | | fq8j\djqc-.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 256 | True | 1 | | | fq8j\djqc-.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 62432 | True | 1 | | | fq8j\djqc-.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 8 | True | 2 | | | fq8j\immdtks6k.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 4 | True | 2 | | | fq8j\immdtks6k.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 256 | True | 1 | | | fq8j\immdtks6k.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 96176 | True | 1 | | | fq8j\immdtks6k.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 8 | True | 2 | | | fq8j\osbg1m5t.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 4 | True | 2 | | | fq8j\osbg1m5t.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 256 | True | 1 | | | fq8j\osbg1m5t.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 92768 | True | 1 | | | fq8j\osbg1m5t.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 8 | True | 2 | | | fq8j\qa9nxio402_he z.swf.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 4 | True | 2 | | | fq8j\qa9nxio402_he z.swf.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 256 | True | 1 | | | fq8j\qa9nxio402_he z.swf.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 84208 | True | 1 | | | fq8j\qa9nxio402_he z.swf.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\music\sample music\kalimba.mp3.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\music\sample music\kalimba.mp3.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\music\sample music\kalimba.mp3.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\music\sample music\kalimba.mp3.wncryt | size = 1048576 | True | 8 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\music\sample music\kalimba.mp3.wncryt | size = 25856 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\music\sample music\maid with the flaxen hair | size = 8 | True | 2 | | | .mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\music\sample music\maid with the flaxen hair | size = 4 | True | 2 | | | .mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\music\sample music\maid with the flaxen hair | size = 256 | True | 1 | | | .mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\music\sample music\maid with the flaxen hair | size = 1048576 | True | 3 | | | .mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\music\sample music\maid with the flaxen hair | size = 968160 | True | 1 | | | .mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\music\sample music\sleep away.mp3.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\music\sample music\sleep away.mp3.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\music\sample music\sleep away.mp3.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\music\sample music\sleep away.mp3.wncryt | size = 1048576 | True | 4 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\music\sample music\sleep away.mp3.wncryt | size = 648288 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\videos\sample videos\wildlife.wmv.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\videos\sample videos\wildlife.wmv.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\videos\sample videos\wildlife.wmv.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\videos\sample videos\wildlife.wmv.wncryt | size = 1048576 | True | 25 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\public\videos\sample videos\wildlife.wmv.wncryt | size = 31632 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\autoexec.bat.wncryt | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\autoexec.bat.wncryt | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\autoexec.bat.wncryt | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\autoexec.bat.wncryt | size = 32 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 8 | True | 2 | | | umbcache_1024.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 4 | True | 2 | | | umbcache_1024.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 256 | True | 1 | | | umbcache_1024.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 32 | True | 1 | | | umbcache_1024.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 8 | True | 2 | | | umbcache_32.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 4 | True | 2 | | | umbcache_32.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 256 | True | 1 | | | umbcache_32.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 32 | True | 1 | | | umbcache_32.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 8 | True | 2 | | | umbcache_96.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 4 | True | 2 | | | umbcache_96.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 256 | True | 1 | | | umbcache_96.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 32 | True | 1 | | | umbcache_96.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 8 | True | 2 | | | umbcache_sr.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 4 | True | 2 | | | umbcache_sr.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 256 | True | 1 | | | umbcache_sr.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 32 | True | 1 | | | umbcache_sr.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 8 | True | 2 | | | \thumbcache_1024.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 4 | True | 2 | | | \thumbcache_1024.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 256 | True | 1 | | | \thumbcache_1024.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 32 | True | 1 | | | \thumbcache_1024.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 8 | True | 2 | | | \thumbcache_sr.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 4 | True | 2 | | | \thumbcache_sr.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 256 | True | 1 | | | \thumbcache_sr.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 32 | True | 1 | | | \thumbcache_sr.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 8 | True | 2 | | | s\low\dssdpmx042@google[2].txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 4 | True | 2 | | | s\low\dssdpmx042@google[2].txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 256 | True | 1 | | | s\low\dssdpmx042@google[2].txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 208 | True | 1 | | | s\low\dssdpmx042@google[2].txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 8 | True | 2 | | | s\low\dssdpmx042@java[1].txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 4 | True | 2 | | | s\low\dssdpmx042@java[1].txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 256 | True | 1 | | | s\low\dssdpmx042@java[1].txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 560 | True | 1 | | | s\low\dssdpmx042@java[1].txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 8 | True | 2 | | | s\low\dssdpmx042@oracle.112.2o7[2].txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 4 | True | 2 | | | s\low\dssdpmx042@oracle.112.2o7[2].txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 256 | True | 1 | | | s\low\dssdpmx042@oracle.112.2o7[2].txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 128 | True | 1 | | | s\low\dssdpmx042@oracle.112.2o7[2].txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | write | c:\windows\temp\hibsys.wncryt | size = 10485760 | True | 40 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_dir | c:\programdata\qxtqusdnjzrizx418\msg | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\programdata\qxtqusdnjzrizx418\c.wnry | size = 780 | True | 3 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\programdata\qxtqusdnjzrizx418\t.wnry | size = 8 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\programdata\qxtqusdnjzrizx418\t.wnry | size = 4 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\programdata\qxtqusdnjzrizx418\t.wnry | size = 256 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\programdata\qxtqusdnjzrizx418\t.wnry | size = 65816 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\programdata\qxtqusdnjzrizx418\00000000.pky | size = 276 | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\programdata\qxtqusdnjzrizx418\r.wnry | size = 4096 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\bibagpmyuse2qjdfr.jpg | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\bibagpmyuse2qjdfr.jpg | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\h yrmf.docx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\h yrmf.docx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\hwef8jg56gk9dlonf.csv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\hwef8jg56gk9dlonf.csv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2bnrt.xlsx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2bnrt.xlsx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\qb17mfblutnx_jw3.jpg | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\qb17mfblutnx_jw3.jpg | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\xirvpsv.pptx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\xirvpsv.pptx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\z89la7110x3isdf6.doc | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\z89la7110x3isdf6.doc | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\6pkpcf4uawt | size = 8 | True | 1 | | | zg4xqlmdz.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\6pkpcf4uawt | size = 1048576 | True | 1 | | | zg4xqlmdz.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 8 | True | 1 | | | ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 1048576 | True | 1 | | | ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\3kmod_2d6ued.swf | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\3kmod_2d6ued.swf | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\acndlsz4zhbdyziqkotj.mp3 | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\acndlsz4zhbdyziqkotj.mp3 | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\ajkh5gnvfe8rqzavym.png | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\ajkh5gnvfe8rqzavym.png | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\blw7.png | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\blw7.png | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\c9dt7ht6ochw_r.flv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\c9dt7ht6ochw_r.flv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\fycbs5cumf6dh_fs.ods | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\fycbs5cumf6dh_fs.ods | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\gfs3quzvztmy-jq6xox.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\gfs3quzvztmy-jq6xox.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\h4mzf.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\h4mzf.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\hyxaas7ppqlngg5ir6.mp4 | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\hyxaas7ppqlngg5ir6.mp4 | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\kit3qjluq u1ehoy.wav | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\kit3qjluq u1ehoy.wav | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\lkwb.wav | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\lkwb.wav | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\m-flkfw.pps | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\m-flkfw.pps | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\p6tg4g.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\p6tg4g.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\ytaj9x8n5wxojmujtmi.gif | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\ytaj9x8n5wxojmujtmi.gif | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\zb1nbq.mp4 | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\zb1nbq.mp4 | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\zu3ocp3f88cn.flv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\zu3ocp3f88cn.flv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\- jmajpm5_r | size = 8 | True | 1 | | | ro.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\- jmajpm5_r | size = 1048576 | True | 1 | | | ro.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\mf1nbo.swf | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\mf1nbo.swf | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ksln | size = 8 | True | 1 | | | i5puyuj.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ksln | size = 1048576 | True | 1 | | | i5puyuj.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ntjk | size = 8 | True | 1 | | | r9csa.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ntjk | size = 1048576 | True | 1 | | | r9csa.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\nxds | size = 8 | True | 1 | | | miu.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\nxds | size = 1048576 | True | 1 | | | miu.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 8 | True | 1 | | | \2h9gjyzxutjtaj vlt76.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 1048576 | True | 1 | | | \2h9gjyzxutjtaj vlt76.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 8 | True | 1 | | | \9wcvzyuqncphgsqczkn.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 1048576 | True | 1 | | | \9wcvzyuqncphgsqczkn.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 8 | True | 1 | | | \kpyogarb2ozckx549d.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 1048576 | True | 1 | | | \kpyogarb2ozckx549d.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 8 | True | 1 | | | \z8mf4.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | size = 1048576 | True | 1 | | | \z8mf4.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 8 | True | 1 | | | ysj1\tey_zyonktol5ojrt0io.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 1048576 | True | 1 | | | ysj1\tey_zyonktol5ojrt0io.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 8 | True | 1 | | | ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 1048576 | True | 1 | | | ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 8 | True | 1 | | | ysj1\2tpofaj-rucn\93pm.gif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 1048576 | True | 1 | | | ysj1\2tpofaj-rucn\93pm.gif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 8 | True | 1 | | | ysj1\2tpofaj-rucn\cxy8v.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 1048576 | True | 1 | | | ysj1\2tpofaj-rucn\cxy8v.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 8 | True | 1 | | | ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 1048576 | True | 1 | | | ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 8 | True | 1 | | | ysj1\2tpofaj-rucn\yg84pi.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 1048576 | True | 1 | | | ysj1\2tpofaj-rucn\yg84pi.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 8 | True | 1 | | | ysj1\2tpofaj-rucn\yoo37jp7q.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | size = 1048576 | True | 1 | | | ysj1\2tpofaj-rucn\yoo37jp7q.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\5dwumhpov0ond.doc | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\5dwumhpov0ond.doc | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\5pfcgtj7-40fzu.docx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\5pfcgtj7-40fzu.docx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\9c54.docx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\9c54.docx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\axmcb.docx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\axmcb.docx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\f8t0d1hl8mulgw0ye.pptx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\f8t0d1hl8mulgw0ye.pptx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\g9fp hftlrgz5w.xls | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\g9fp hftlrgz5w.xls | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\gmphr0w6rrpdhpbef.csv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\gmphr0w6rrpdhpbef.csv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\gpimnirm chkjuih.xlsx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\gpimnirm chkjuih.xlsx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\hemk7ngcvjguirn6.xlsx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\hemk7ngcvjguirn6.xlsx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\kqsfgiuuv7macle5kbe.pptx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\kqsfgiuuv7macle5kbe.pptx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\lsifcdcb6tbfbadh2jc.pptx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\lsifcdcb6tbfbadh2jc.pptx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\lu6w3pxpu3ca.xlsx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\lu6w3pxpu3ca.xlsx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\ly7o.pptx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\ly7o.pptx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\qocbs.docx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\qocbs.docx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\tcrd9un1_myjq-.pptx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\tcrd9un1_myjq-.pptx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\wv7vnssgbfodzvw.xlsx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\wv7vnssgbfodzvw.xlsx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\yzoy0uk.pptx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\yzoy0uk.pptx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\zwklqrq2nlske44p.xlsx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\zwklqrq2nlske44p.xlsx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\_xgwdcsgf mjc6 j.docx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\_xgwdcsgf mjc6 j.docx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\-nap.rtf | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\-nap.rtf | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\9o_u.pdf | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\9o_u.pdf | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\k6fadynloup1zicvtg0o.xl | size = 8 | True | 1 | | | sx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\k6fadynloup1zicvtg0o.xl | size = 1048576 | True | 1 | | | sx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\p3k5i8nny2aq5c.pptx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\p3k5i8nny2aq5c.pptx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\y5sy7w | size = 8 | True | 1 | | | jt_a7krqnidgx.xlsx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\y5sy7w | size = 1048576 | True | 1 | | | jt_a7krqnidgx.xlsx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 8 | True | 1 | | | sbxkqajovxqwlt.csv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 1048576 | True | 1 | | | sbxkqajovxqwlt.csv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\fxx | size = 8 | True | 1 | | | fw-17sc6wh.ppt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\fxx | size = 1048576 | True | 1 | | | fw-17sc6wh.ppt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\vsh | size = 8 | True | 1 | | | y_qomhsb5w.ppt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\vsh | size = 1048576 | True | 1 | | | y_qomhsb5w.ppt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 8 | True | 1 | | | c-nspy xfvlw3\coafenjkmrn.xlsx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 1048576 | True | 1 | | | c-nspy xfvlw3\coafenjkmrn.xlsx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\kqu8ojbhlzr.odp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\kqu8ojbhlzr.odp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\qracrespejeu3.ods | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\qracrespejeu3.ods | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\t9kbu.ots | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\t9kbu.ots | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\uigp.odp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\uigp.odp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\v3b5lp | size = 8 | True | 1 | | | gbpfe06xmrqjo.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\v3b5lp | size = 1048576 | True | 1 | | | gbpfe06xmrqjo.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 8 | True | 1 | | | k_5vq4jhsw8guvo.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 1048576 | True | 1 | | | k_5vq4jhsw8guvo.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 8 | True | 1 | | | qbqa9 xzsel7xnah8.pps | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | size = 1048576 | True | 1 | | | qbqa9 xzsel7xnah8.pps | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\bzr | size = 8 | True | 1 | | | tj.pps | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\bzr | size = 1048576 | True | 1 | | | tj.pps | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\lo4 | size = 8 | True | 1 | | | nczsaz.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\lo4 | size = 1048576 | True | 1 | | | nczsaz.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\nqa | size = 8 | True | 1 | | | -xbh.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\nqa | size = 1048576 | True | 1 | | | -xbh.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 8 | True | 1 | | | c-nspy xfvlw3\-nos.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 1048576 | True | 1 | | | c-nspy xfvlw3\-nos.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 8 | True | 1 | | | c-nspy xfvlw3\axtg6ai5-.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 1048576 | True | 1 | | | c-nspy xfvlw3\axtg6ai5-.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 8 | True | 1 | | | c-nspy xfvlw3\qz1senichq4fy3oijrd.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | size = 1048576 | True | 1 | | | c-nspy xfvlw3\qz1senichq4fy3oijrd.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows nt\msscan\welcomescan.j | size = 8 | True | 1 | | | pg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows nt\msscan\welcomescan.j | size = 1048576 | True | 1 | | | pg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\internet explorer\b | size = 8 | True | 1 | | | rndlog.txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\internet explorer\b | size = 1048576 | True | 1 | | | rndlog.txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 1 | | | nery\bears.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 1048576 | True | 1 | | | nery\bears.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 1 | | | nery\garden.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 1048576 | True | 1 | | | nery\garden.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 1 | | | nery\greenbubbles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 1048576 | True | 1 | | | nery\greenbubbles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 1 | | | nery\handprints.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 1048576 | True | 1 | | | nery\handprints.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 1 | | | nery\orangecircles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 1048576 | True | 1 | | | nery\orangecircles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 1 | | | nery\peacock.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 1048576 | True | 1 | | | nery\peacock.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 1 | | | nery\roses.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 1048576 | True | 1 | | | nery\roses.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 1 | | | nery\shadesofblue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 1048576 | True | 1 | | | nery\shadesofblue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 1 | | | nery\softblue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 1048576 | True | 1 | | | nery\softblue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 8 | True | 1 | | | nery\stars.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows mail\statio | size = 1048576 | True | 1 | | | nery\stars.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\roaming\microsoft\windows\themes\tr | size = 8 | True | 1 | | | anscodedwallpaper.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\roaming\microsoft\windows\themes\tr | size = 1048576 | True | 1 | | | anscodedwallpaper.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | size = 8 | True | 1 | | | r\brndlog.txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | size = 1048576 | True | 1 | | | r\brndlog.txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 1 | | | tionery\bears.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 1048576 | True | 1 | | | tionery\bears.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 1 | | | tionery\garden.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 1048576 | True | 1 | | | tionery\garden.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 1 | | | tionery\greenbubbles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 1048576 | True | 1 | | | tionery\greenbubbles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 1 | | | tionery\handprints.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 1048576 | True | 1 | | | tionery\handprints.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 1 | | | tionery\orangecircles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 1048576 | True | 1 | | | tionery\orangecircles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 1 | | | tionery\peacock.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 1048576 | True | 1 | | | tionery\peacock.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 1 | | | tionery\roses.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 1048576 | True | 1 | | | tionery\roses.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 1 | | | tionery\shadesofblue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 1048576 | True | 1 | | | tionery\shadesofblue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 1 | | | tionery\softblue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 1048576 | True | 1 | | | tionery\softblue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 8 | True | 1 | | | tionery\stars.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | size = 1048576 | True | 1 | | | tionery\stars.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\d56ie.csv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\d56ie.csv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\dx-rnsk.jpg | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\dx-rnsk.jpg | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\ir5gaytbg.jpg | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\ir5gaytbg.jpg | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\mpx3v.xlsx | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\mpx3v.xlsx | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\o7p_l.xls | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\o7p_l.xls | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\ozq_qxmblgn17n.pdf | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\ozq_qxmblgn17n.pdf | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\themes | size = 8 | True | 1 | | | \transcodedwallpaper.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\themes | size = 1048576 | True | 1 | | | \transcodedwallpaper.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\55woz240.jpg | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\55woz240.jpg | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\j5lndpj\rely_w0.jpg | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\j5lndpj\rely_w0.jpg | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\j5lndpj\txokdckrvk.jpg | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\j5lndpj\txokdckrvk.jpg | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\u0low_3k9h1go | size = 8 | True | 1 | | | py7.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\u0low_3k9h1go | size = 1048576 | True | 1 | | | py7.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | size = 8 | True | 1 | | | \uvrcjvwuev0rc6u9m.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | size = 1048576 | True | 1 | | | \uvrcjvwuev0rc6u9m.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\_2hzdo\soyiwozbtzrklfzgmav.jpg | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\_2hzdo\soyiwozbtzrklfzgmav.jpg | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\pictures\sample pictures\chrysanthemum.jpg | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\pictures\sample pictures\chrysanthemum.jpg | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\pictures\sample pictures\desert.jpg | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\pictures\sample pictures\desert.jpg | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\pictures\sample pictures\hydrangeas.jpg | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\pictures\sample pictures\hydrangeas.jpg | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\pictures\sample pictures\jellyfish.jpg | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\pictures\sample pictures\jellyfish.jpg | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\pictures\sample pictures\koala.jpg | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\pictures\sample pictures\koala.jpg | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\pictures\sample pictures\lighthouse.jpg | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\pictures\sample pictures\lighthouse.jpg | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\pictures\sample pictures\penguins.jpg | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\pictures\sample pictures\penguins.jpg | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\pictures\sample pictures\tulips.jpg | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\pictures\sample pictures\tulips.jpg | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\bootsect.bak | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\bootsect.bak | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 8 | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\background.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 1048576 | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\background.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 8 | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\device.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 1048576 | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\device.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 8 | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\overlay.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 1048576 | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\overlay.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 8 | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\superbar.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\device stage\device\{113527a4-4 | size = 1048576 | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\superbar.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\device stage\device\{8702d817-5 | size = 8 | True | 1 | | | aad-4674-9ef3-4d3decd87120}\background.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\device stage\device\{8702d817-5 | size = 1048576 | True | 1 | | | aad-4674-9ef3-4d3decd87120}\background.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\device stage\device\{8702d817-5 | size = 8 | True | 1 | | | aad-4674-9ef3-4d3decd87120}\watermark.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\device stage\device\{8702d817-5 | size = 1048576 | True | 1 | | | aad-4674-9ef3-4d3decd87120}\watermark.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\search\data\applications\window | size = 8 | True | 1 | | | s\windows.edb | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\search\data\applications\window | size = 1048576 | True | 40 | | | s\windows.edb | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\search\data\applications\window | size = 1048576 | True | 1 | | | s\windows.edb | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\guest.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\guest.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\user.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\user.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile10.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile10.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile11.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile11.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile12.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile12.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile13.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile13.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile14.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile14.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile15.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile15.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile16.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile16.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile17.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile17.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile18.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile18.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile19.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile19.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile20.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile20.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile21.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile21.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile22.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile22.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile23.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile23.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile24.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile24.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile25.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile25.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile26.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile26.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile27.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile27.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile28.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile28.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile29.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile29.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile30.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile30.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile31.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile31.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile32.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile32.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile33.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile33.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile34.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile34.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile35.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile35.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile36.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile36.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile37.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile37.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile38.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile38.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile39.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile39.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile40.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile40.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile41.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile41.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile42.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile42.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile43.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile43.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 8 | True | 1 | | | ictures\usertile44.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\user account pictures\default p | size = 1048576 | True | 1 | | | ictures\usertile44.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\caches\cversions.2.db | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\caches\cversions.2.db | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\caches\{67d69890-d853-4 | size = 8 | True | 1 | | | 011-a87e-aa64fa83ce5a}.2.ver0x0000000000000002.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\caches\{67d69890-d853-4 | size = 1048576 | True | 1 | | | 011-a87e-aa64fa83ce5a}.2.ver0x0000000000000002.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 8 | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000004.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 1048576 | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000004.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 8 | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 1048576 | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 8 | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000006.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 1048576 | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000006.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 8 | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000007.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | size = 1048576 | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000007.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\caches\{7cd55808-3d38-4 | size = 8 | True | 1 | | | dd5-90c9-62f0e6ee60d4}.2.ver0x0000000000000001.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\caches\{7cd55808-3d38-4 | size = 1048576 | True | 1 | | | dd5-90c9-62f0e6ee60d4}.2.ver0x0000000000000001.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\caches\{ddf571f2-be98-4 | size = 8 | True | 1 | | | 26d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\caches\{ddf571f2-be98-4 | size = 1048576 | True | 1 | | | 26d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 01.w | size = 8 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 01.w | size = 1048576 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 02.w | size = 8 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 02.w | size = 1048576 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 03.w | size = 8 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 03.w | size = 1048576 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 04.w | size = 8 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 04.w | size = 1048576 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 05.w | size = 8 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 05.w | size = 1048576 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 06.w | size = 8 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 06.w | size = 1048576 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 07.w | size = 8 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 07.w | size = 1048576 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 08.w | size = 8 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 08.w | size = 1048576 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 09.w | size = 8 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 09.w | size = 1048576 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 10.w | size = 8 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows\ringtones\ringtone 10.w | size = 1048576 | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\e | size = 8 | True | 1 | | | n-us\welcomefax.tif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\e | size = 1048576 | True | 1 | | | n-us\welcomefax.tif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\iconcache.db | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\iconcache.db | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 8 | True | 1 | | | umbcache_256.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 1048576 | True | 1 | | | umbcache_256.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 8 | True | 1 | | | umbcache_idx.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 1048576 | True | 1 | | | umbcache_idx.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\iconcache.db | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\iconcache.db | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\iconcache.db | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | size = 8 | True | 1 | | | r\brndlog.bak | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | size = 1048576 | True | 1 | | | r\brndlog.bak | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\c | size = 8 | True | 1 | | | versions.1.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\c | size = 1048576 | True | 1 | | | versions.1.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | size = 8 | True | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000 | | | | | | f.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | size = 1048576 | True | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000 | | | | | | f.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | size = 8 | True | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001 | | | | | | 0.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | size = 1048576 | True | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001 | | | | | | 0.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 8 | True | 1 | | | \thumbcache_256.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 1048576 | True | 2 | | | \thumbcache_256.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 8 | True | 2 | | | \thumbcache_32.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 1048576 | True | 1 | | | \thumbcache_32.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 8 | True | 1 | | | \thumbcache_96.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 1048576 | True | 1 | | | \thumbcache_96.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 8 | True | 1 | | | \thumbcache_idx.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 1048576 | True | 1 | | | \thumbcache_idx.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\bp7n0_qwtwkorxg.mp3 | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\bp7n0_qwtwkorxg.mp3 | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\bywi0qluwl3w9bud5f3o.gif | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\bywi0qluwl3w9bud5f3o.gif | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\dayij9-o1e8.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\dayij9-o1e8.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\dhlstwctu20.swf | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\dhlstwctu20.swf | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\djlklpzvvty.swf | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\djlklpzvvty.swf | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\dz0vptp5owvhzt.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\dz0vptp5owvhzt.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\g2kjjoggr_cgbs8b.flv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\g2kjjoggr_cgbs8b.flv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\g_iap-kg5-s.wav | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\g_iap-kg5-s.wav | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\jqzjf0k.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\jqzjf0k.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\mhjvg24dofm.pps | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\mhjvg24dofm.pps | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\nrae.png | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\nrae.png | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\o8fcddpbkgpe-.swf | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\o8fcddpbkgpe-.swf | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\ojefr7lfa6sgok2mjmm.mp3 | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\ojefr7lfa6sgok2mjmm.mp3 | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\orfn2vwitjww5.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\orfn2vwitjww5.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\ph1dzo_.png | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\ph1dzo_.png | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\qq1a2p8piiy_edbcli.mkv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\qq1a2p8piiy_edbcli.mkv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\qwg2cvfqc9ez1jca.mp3 | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\qwg2cvfqc9ez1jca.mp3 | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\ra-n6lubasx5.swf | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\ra-n6lubasx5.swf | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\rjwem.avi | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\rjwem.avi | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\sh5e3mmjvux.mkv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\sh5e3mmjvux.mkv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\sl9ersroh9zeq.png | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\sl9ersroh9zeq.png | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\uaebzgeiegneodnlxncn.mkv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\uaebzgeiegneodnlxncn.mkv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\ultbjg f.pps | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\ultbjg f.pps | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\uywba9uh15vmu3etzhh-.mkv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\uywba9uh15vmu3etzhh-.mkv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\vsm1crhdjx95vtws.flv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\vsm1crhdjx95vtws.flv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\wgxrl2.odt | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\wgxrl2.odt | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\xdsqx_wxf9k9q.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\xdsqx_wxf9k9q.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\xf1j6kjktjpo ac8gr6.ots | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\xf1j6kjktjpo ac8gr6.ots | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\zmej2xz6d3on_bh9gk7g.wav | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\zmej2xz6d3on_bh9gk7g.wav | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\dfkh.wav | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\dfkh.wav | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\hmdiztpptjk3.wav | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\hmdiztpptjk3.wav | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\zptabq.mp3 | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\zptabq.mp3 | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\lk-vjlkc3mbxebkrauk.wa | size = 8 | True | 1 | | | v | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\lk-vjlkc3mbxebkrauk.wa | size = 1048576 | True | 1 | | | v | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\9 bxr.wav | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\9 bxr.wav | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\bm1lj1elmahv.wav | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\bm1lj1elmahv.wav | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\hwq_e63aib.wav | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\hwq_e63aib.wav | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\qni_.mp3 | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\qni_.mp3 | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\zhvacu3zm4pi0lqv. | size = 8 | True | 1 | | | mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\zhvacu3zm4pi0lqv. | size = 1048576 | True | 1 | | | mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\0qrd5fx.mp3 | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\0qrd5fx.mp3 | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\vox09umk.mp3 | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\vox09umk.mp3 | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\2reugw.wav | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\2reugw.wav | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\4sarhcvjd04q.mp3 | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\4sarhcvjd04q.mp3 | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\9z_ehnks.wav | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\9z_ehnks.wav | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\c5alotv4.wav | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\c5alotv4.wav | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\kfqjlmnelq.mp3 | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\kfqjlmnelq.mp3 | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\mlx4g8dg4dbcwao4. | size = 8 | True | 1 | | | wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\mlx4g8dg4dbcwao4. | size = 1048576 | True | 1 | | | wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\0-sd9l8u\dji4emfc | size = 8 | True | 1 | | | xz9.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\0-sd9l8u\dji4emfc | size = 1048576 | True | 1 | | | xz9.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\r4lsao\csxh-dp0pz | size = 8 | True | 1 | | | vfbfnnd.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\r4lsao\csxh-dp0pz | size = 1048576 | True | 1 | | | vfbfnnd.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\gi9i | size = 8 | True | 1 | | | p_csel.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\gi9i | size = 1048576 | True | 1 | | | p_csel.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\s9_2 | size = 8 | True | 1 | | | q.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\s9_2 | size = 1048576 | True | 1 | | | q.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\xysc | size = 8 | True | 1 | | | fw4.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\xysc | size = 1048576 | True | 1 | | | fw4.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\aicirck.gif | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\aicirck.gif | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\drba.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\drba.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\eszy hkfdwfx0.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\eszy hkfdwfx0.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\imjwbtsshxgloi.gif | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\imjwbtsshxgloi.gif | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\n5vvg0h1npv.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\n5vvg0h1npv.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\pwvh0sxs 4u.gif | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\pwvh0sxs 4u.gif | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\r9tluytrypiqhwf.gif | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\r9tluytrypiqhwf.gif | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\_y79.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\_y79.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\j5lndpj\5he-bihy791udb060xb.gif | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\j5lndpj\5he-bihy791udb060xb.gif | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\j5lndpj\jgg9piy6c.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\j5lndpj\jgg9piy6c.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\4r2l.png | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\4r2l.png | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\wosctyozygi-. | size = 8 | True | 1 | | | png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\wosctyozygi-. | size = 1048576 | True | 1 | | | png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\d0ifk_s5cqbrv.png | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\d0ifk_s5cqbrv.png | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\h pgorp n6u.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\h pgorp n6u.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\rgfjlx032dp7.gif | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\rgfjlx032dp7.gif | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\wu4tbykxf6k0p.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\wu4tbykxf6k0p.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\xqj6y5vsd79ypdjyjlfn.p | size = 8 | True | 1 | | | ng | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\xqj6y5vsd79ypdjyjlfn.p | size = 1048576 | True | 1 | | | ng | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\zlpvbnitdrc.png | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\zlpvbnitdrc.png | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\_nmlicbf8j8nqyjj7kp.bm | size = 8 | True | 1 | | | p | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\_nmlicbf8j8nqyjj7kp.bm | size = 1048576 | True | 1 | | | p | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\2bzr.gif | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\2bzr.gif | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\khl4ego4d 5rt4 | size = 8 | True | 1 | | | l.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\khl4ego4d 5rt4 | size = 1048576 | True | 1 | | | l.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\spxsplgrt3p.pn | size = 8 | True | 1 | | | g | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\spxsplgrt3p.pn | size = 1048576 | True | 1 | | | g | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\xyz8ce1lhaimq. | size = 8 | True | 1 | | | gif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\xyz8ce1lhaimq. | size = 1048576 | True | 1 | | | gif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\awko | size = 8 | True | 1 | | | rjfj_tbwlbiowt.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\awko | size = 1048576 | True | 1 | | | rjfj_tbwlbiowt.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\mnu7 | size = 8 | True | 1 | | | k.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\mnu7 | size = 1048576 | True | 1 | | | k.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\oxdt | size = 8 | True | 1 | | | .png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\oxdt | size = 1048576 | True | 1 | | | .png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | size = 8 | True | 1 | | | \mhanq6ms_jz ssx.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | size = 1048576 | True | 1 | | | \mhanq6ms_jz ssx.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\_2hzdo\8r-qyt.png | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\_2hzdo\8r-qyt.png | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\_2hzdo\ddw1j2dvm.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\_2hzdo\ddw1j2dvm.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\_2hzdo\ehtgsx0.bmp | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\_2hzdo\ehtgsx0.bmp | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\_2hzdo\oiputxj.png | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\_2hzdo\oiputxj.png | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\_2hzdo\wxqsaaq6i.gif | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\pictures\_2hzdo\wxqsaaq6i.gif | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\0rt9n7waqqvk6-s.swf | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\0rt9n7waqqvk6-s.swf | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\gls-an3bnb6su.mkv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\gls-an3bnb6su.mkv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\hi-kh7n3amacgd.mkv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\hi-kh7n3amacgd.mkv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\ouvp28f9ewmi29.swf | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\ouvp28f9ewmi29.swf | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\rlh2om7hsceo6pzume.swf | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\rlh2om7hsceo6pzume.swf | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\676ht6zbx.mkv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\676ht6zbx.mkv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\929sjpu-xrkj3e | size = 8 | True | 1 | | | 1t9j7.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\929sjpu-xrkj3e | size = 1048576 | True | 1 | | | 1t9j7.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\bcyq1.flv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\bcyq1.flv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\hve _ffgg.avi | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\hve _ffgg.avi | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\oia-6xvkp.swf | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\oia-6xvkp.swf | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\peij538fk.mp4 | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\peij538fk.mp4 | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\hakyslty-m-z9\2iw7k-.mkv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\hakyslty-m-z9\2iw7k-.mkv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\hakyslty-m-z9\kdlazanuxnjlg4yrhvf | size = 8 | True | 1 | | | q.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\hakyslty-m-z9\kdlazanuxnjlg4yrhvf | size = 1048576 | True | 1 | | | q.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\hakyslty-m-z9\l1fq7b itpwhhcdab05 | size = 8 | True | 1 | | | u.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\hakyslty-m-z9\l1fq7b itpwhhcdab05 | size = 1048576 | True | 1 | | | u.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\hakyslty-m-z9\lhhbjhevi.mkv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\hakyslty-m-z9\lhhbjhevi.mkv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\hakyslty-m-z9\milwbj.flv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\hakyslty-m-z9\milwbj.flv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\hakyslty-m-z9\mr1ex3.swf | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\hakyslty-m-z9\mr1ex3.swf | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\hakyslty-m-z9\vc2cl4ln.mkv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\hakyslty-m-z9\vc2cl4ln.mkv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\4oj9yfl3dn.flv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\4oj9yfl3dn.flv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\agmtjgfx.mkv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\agmtjgfx.mkv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\hsbc.mkv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\hsbc.mkv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\hwj0zzo_r1q_pfff2.a | size = 8 | True | 1 | | | vi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\hwj0zzo_r1q_pfff2.a | size = 1048576 | True | 1 | | | vi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\kj9gatk fbtmtzat.sw | size = 8 | True | 1 | | | f | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\kj9gatk fbtmtzat.sw | size = 1048576 | True | 1 | | | f | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\nbuaos9o4zd04f6rvgq | size = 8 | True | 1 | | | y.swf | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\nbuaos9o4zd04f6rvgq | size = 1048576 | True | 1 | | | y.swf | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\rh6x.mp4 | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\rh6x.mp4 | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\_akuod4i4xu431o1mvn | size = 8 | True | 1 | | | e.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\_akuod4i4xu431o1mvn | size = 1048576 | True | 1 | | | e.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\gdhhhwnb.flv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\gdhhhwnb.flv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\t0_1iokbd.swf | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\t0_1iokbd.swf | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\vbvvvvb4i.mkv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\vbvvvvb4i.mkv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ydjjqoani2hety | size = 8 | True | 1 | | | 5e.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ydjjqoani2hety | size = 1048576 | True | 1 | | | 5e.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 8 | True | 1 | | | fq8j\87xpzn.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 1048576 | True | 1 | | | fq8j\87xpzn.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 8 | True | 1 | | | fq8j\dd3qogjnlsgkg1--_vs.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 1048576 | True | 1 | | | fq8j\dd3qogjnlsgkg1--_vs.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 8 | True | 1 | | | fq8j\djqc-.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 1048576 | True | 1 | | | fq8j\djqc-.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 8 | True | 1 | | | fq8j\immdtks6k.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 1048576 | True | 1 | | | fq8j\immdtks6k.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 8 | True | 1 | | | fq8j\osbg1m5t.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 1048576 | True | 1 | | | fq8j\osbg1m5t.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 8 | True | 1 | | | fq8j\qa9nxio402_he z.swf | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | size = 1048576 | True | 1 | | | fq8j\qa9nxio402_he z.swf | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\music\sample music\kalimba.mp3 | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\music\sample music\kalimba.mp3 | size = 1048576 | True | 8 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\music\sample music\kalimba.mp3 | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\music\sample music\maid with the flaxen hair | size = 8 | True | 1 | | | .mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\music\sample music\maid with the flaxen hair | size = 1048576 | True | 3 | | | .mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\music\sample music\maid with the flaxen hair | size = 1048576 | True | 1 | | | .mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\music\sample music\sleep away.mp3 | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\music\sample music\sleep away.mp3 | size = 1048576 | True | 4 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\music\sample music\sleep away.mp3 | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\videos\sample videos\wildlife.wmv | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\videos\sample videos\wildlife.wmv | size = 1048576 | True | 25 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\public\videos\sample videos\wildlife.wmv | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\autoexec.bat | size = 8 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\autoexec.bat | size = 1048576 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 8 | True | 1 | | | umbcache_1024.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 1048576 | True | 1 | | | umbcache_1024.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 8 | True | 1 | | | umbcache_32.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 1048576 | True | 1 | | | umbcache_32.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 8 | True | 1 | | | umbcache_96.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 1048576 | True | 1 | | | umbcache_96.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 8 | True | 1 | | | umbcache_sr.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\default\appdata\local\microsoft\windows\explorer\th | size = 1048576 | True | 1 | | | umbcache_sr.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 8 | True | 1 | | | \thumbcache_1024.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 1048576 | True | 1 | | | \thumbcache_1024.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | size = 1048576 | True | 1 | | | \thumbcache_sr.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 8 | True | 1 | | | s\low\dssdpmx042@google[2].txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 1048576 | True | 1 | | | s\low\dssdpmx042@google[2].txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 8 | True | 1 | | | s\low\dssdpmx042@java[1].txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 1048576 | True | 1 | | | s\low\dssdpmx042@java[1].txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 8 | True | 1 | | | s\low\dssdpmx042@oracle.112.2o7[2].txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | read | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | size = 1048576 | True | 1 | | | s\low\dssdpmx042@oracle.112.2o7[2].txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\programdata\qxtqusdnjzrizx418\00000000.res | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\desktop\~sd927e.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default user\desktop\~sd92dd.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\~sd92ed.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\bibagpmyuse2qjdfr.jpg.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\h yrmf.docx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\hwef8jg56gk9dlonf.csv.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2bnrt.xlsx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\qb17mfblutnx_jw3.jpg.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\xirvpsv.pptx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\z89la7110x3isdf6.doc.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\~sd9761.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\6pkpcf4uawt | | False | 1 | | | zg4xqlmdz.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\~sd9 | | True | 1 | | | 7c0.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | | True | 1 | | | \~sd983e.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | True | 1 | | | ysj1\~sd98ac.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | True | 1 | | | ysj1\2tpofaj-rucn\~sd98dc.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | False | 1 | | | ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\3kmod_2d6ued.swf.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\acndlsz4zhbdyziqkotj.mp3.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\ajkh5gnvfe8rqzavym.png.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\blw7.png.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\c9dt7ht6ochw_r.flv.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\fycbs5cumf6dh_fs.ods.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\gfs3quzvztmy-jq6xox.bmp.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\h4mzf.bmp.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\hyxaas7ppqlngg5ir6.mp4.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\kit3qjluq u1ehoy.wav.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\lkwb.wav.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\m-flkfw.pps.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\p6tg4g.bmp.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\ytaj9x8n5wxojmujtmi.gif.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\zb1nbq.mp4.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\zu3ocp3f88cn.flv.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\- jmajpm5_r | | False | 1 | | | ro.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\mf1nbo.swf. | | False | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ksln | | False | 1 | | | i5puyuj.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ntjk | | False | 1 | | | r9csa.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\nxds | | False | 1 | | | miu.odp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | | False | 1 | | | \2h9gjyzxutjtaj vlt76.ods.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | | False | 1 | | | \9wcvzyuqncphgsqczkn.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | | False | 1 | | | \kpyogarb2ozckx549d.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | | False | 1 | | | \z8mf4.avi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | False | 1 | | | ysj1\tey_zyonktol5ojrt0io.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | False | 1 | | | ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | False | 1 | | | ysj1\2tpofaj-rucn\93pm.gif.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | False | 1 | | | ysj1\2tpofaj-rucn\cxy8v.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | False | 1 | | | ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | False | 1 | | | ysj1\2tpofaj-rucn\yg84pi.avi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | False | 1 | | | ysj1\2tpofaj-rucn\yoo37jp7q.wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\desktop\~sda1e1.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\documents\~sda433.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default user\documents\~sda444.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\~sda493.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\5dwumhpov0ond.doc.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\5pfcgtj7-40fzu.docx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\9c54.docx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\axmcb.docx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\f8t0d1hl8mulgw0ye.pptx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\g9fp hftlrgz5w.xls.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\gmphr0w6rrpdhpbef.csv.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\gpimnirm chkjuih.xlsx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\hemk7ngcvjguirn6.xlsx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\kqsfgiuuv7macle5kbe.pptx.wncry | | False | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\lsifcdcb6tbfbadh2jc.pptx.wncry | | False | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\lu6w3pxpu3ca.xlsx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\ly7o.pptx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\qocbs.docx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\tcrd9un1_myjq-.pptx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\wv7vnssgbfodzvw.xlsx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\yzoy0uk.pptx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\zwklqrq2nlske44p.xlsx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\_xgwdcsgf mjc6 j.docx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\~sdb085.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\-nap.rtf.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\9o_u.pdf.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\k6fadynloup1zicvtg0o.xl | | False | 1 | | | sx.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\p3k5i8nny2aq5c.pptx.wnc | | False | 1 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\~sdb28 | | True | 1 | | | 9.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\y5sy7w | | False | 1 | | | jt_a7krqnidgx.xlsx.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | | True | 1 | | | ~sdb2f7.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | | False | 1 | | | sbxkqajovxqwlt.csv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\~sd | | True | 1 | | | b356.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\fxx | | False | 1 | | | fw-17sc6wh.ppt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\vsh | | False | 1 | | | y_qomhsb5w.ppt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | | True | 1 | | | c-nspy xfvlw3\~sdb412.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | | False | 1 | | | c-nspy xfvlw3\coafenjkmrn.xlsx.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\kqu8ojbhlzr.odp.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\qracrespejeu3.ods.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\t9kbu.ots.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\uigp.odp.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\v3b5lp | | False | 1 | | | gbpfe06xmrqjo.ots.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | | False | 1 | | | k_5vq4jhsw8guvo.odp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | | False | 1 | | | qbqa9 xzsel7xnah8.pps.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\bzr | | False | 1 | | | tj.pps.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\lo4 | | False | 1 | | | nczsaz.ots.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\nqa | | False | 1 | | | -xbh.odp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | | False | 1 | | | c-nspy xfvlw3\-nos.ods.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | | False | 1 | | | c-nspy xfvlw3\axtg6ai5-.ods.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | | False | 1 | | | c-nspy xfvlw3\qz1senichq4fy3oijrd.ots.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\documents\~sdb72f.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\~sdb73f.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\$recycle.bin\~sdb79e.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\$recycle.bin\s-1-5-21-3385616887-338319549-3229196192-100 | | True | 1 | | | 0\~sdb79f.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\~sdb7bf.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\cs-cz\~sdb81e.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\da-dk\~sdb82e.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\de-de\~sdb84f.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\el-gr\~sdb85f.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\en-us\~sdb870.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\es-es\~sdb890.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\fi-fi\~sdb8b0.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\fonts\~sdb8e0.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\fr-fr\~sdb93f.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\hu-hu\~sdb95f.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\it-it\~sdb96f.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\ja-jp\~sdb980.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\ko-kr\~sdb991.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\nb-no\~sdb9a1.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\nl-nl\~sdb9b2.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\pl-pl\~sdb9c2.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\pt-br\~sdb9d3.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\pt-pt\~sdb9e4.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\ru-ru\~sdb9e5.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\sv-se\~sdb9f5.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\tr-tr\~sdb9f6.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\zh-cn\~sdba07.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\zh-hk\~sdba17.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\boot\zh-tw\~sdba18.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\perflogs\~sdba29.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\perflogs\admin\~sdba2a.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\recovery\~sdba2b.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\recovery\a8ef0822-7920-11e5-85b1-fee83b99d226\~sdba3c.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\system volume information\~sdba4c.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\system volume information\spp\~sdba8c.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\system volume information\spp\onlinemetadatacache\~sdba9c | | True | 1 | | | .tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\system volume information\spp\sppcbshivestore\~sdbaad.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\system volume information\spp\sppgroupcache\~sdbaae.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\~sdbabe.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\~sdbacf.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\~sdbaff.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\assistance\~sdbb2f.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\assistance\client\~sdbb30.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\assistance\client\1.0\~sdbb31.t | | True | 1 | | | mp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\assistance\client\1.0\en-us\~sd | | True | 1 | | | bb41.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\crypto\~sdbb52.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\crypto\dss\~sdbb53.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\crypto\dss\machinekeys\~sdbb54. | | True | 1 | | | tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\crypto\keys\~sdbb64.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\crypto\rsa\~sdbb65.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\crypto\rsa\machinekeys\~sdbb66. | | True | 1 | | | tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\crypto\rsa\s-1-5-18\~sdbb77.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\~sdbb78.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\device\~sdbb89.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\device\{113527a4-4 | | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\~sdbb8a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\device\{8702d817-5 | | True | 1 | | | aad-4674-9ef3-4d3decd87120}\~sdbb9a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\task\~sdbb9b.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\task\{07deb856-fc6 | | True | 1 | | | e-4fb9-8add-d8f2cf8722c9}\~sdbb9c.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\task\{07deb856-fc6 | | True | 1 | | | e-4fb9-8add-d8f2cf8722c9}\en-us\~sdbbad.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\task\{e35be42d-f74 | | True | 1 | | | 2-4d96-a50a-1775fb1a7a42}\~sdbbae.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\task\{e35be42d-f74 | | True | 1 | | | 2-4d96-a50a-1775fb1a7a42}\en-us\~sdbbbe.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\devicesync\~sdbbcf.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\drm\~sdbbd0.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\drm\server\~sdbbe1.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\ehome\~sdbbe2.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\ehome\logs\~sdbbe3.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\event viewer\~sdbbe4.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\event viewer\views\~sdbbf4.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\event viewer\views\applicationv | | True | 1 | | | iewsrootnode\~sdbbf5.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\identitycrl\~sdbbf6.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\media player\~sdbc07.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\mf\~sdbc08.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\network\~sdbc09.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\network\connections\~sdbc0a.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\network\downloader\~sdbc59.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\rac\~sdbc5a.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\rac\outbound\~sdbc6a.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\rac\publisheddata\~sdbc7b.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\rac\statedata\~sdbc7c.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\rac\temp\~sdbc7d.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\search\~sdbc7e.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\search\data\~sdbc8f.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\search\data\applications\~sdbc9 | | True | 1 | | | 0.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\search\data\applications\window | | True | 1 | | | s\~sdbca0.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\search\data\applications\window | | True | 1 | | | s\config\~sdbca1.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\search\data\applications\window | | True | 1 | | | s\gatherlogs\~sdbca2.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\search\data\applications\window | | True | 1 | | | s\gatherlogs\systemindex\~sdbcb3.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\search\data\applications\window | | True | 1 | | | s\projects\~sdbcb4.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\search\data\applications\window | | True | 1 | | | s\projects\systemindex\~sdbcb5.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\search\data\applications\window | | True | 1 | | | s\projects\systemindex\indexer\~sdbcb6.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\search\data\applications\window | | True | 1 | | | s\projects\systemindex\indexer\cifiles\~sdbcb7.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\search\data\applications\window | | True | 1 | | | s\projects\systemindex\propmap\~sdbcb8.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\search\data\applications\window | | True | 1 | | | s\projects\systemindex\secstore\~sdbcb9.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\search\data\temp\~sdbcba.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\~sdbcbb.t | | True | 1 | | | mp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | True | 1 | | | ictures\~sdbccb.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\vault\~sdbcdc.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\~sdbcdd.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ait\~sdbcde.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\caches\~sdbcef.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\devicemetadatastore\~sd | | True | 1 | | | bcf0.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\devicemetadatastore\en- | | True | 1 | | | us\~sdbd00.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\drm\~sdbd11.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\drm\cache\~sdbd12.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\gameexplorer\~sdbd13.tm | | True | 1 | | | p | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\power efficiency diagno | | True | 1 | | | stics\~sdbd23.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\~sdbd24.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\sqm\~sdbd45.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\sqm\manifest\~sdbd55.tm | | True | 1 | | | p | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\sqm\sessions\~sdbd56.tm | | True | 1 | | | p | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\sqm\upload\~sdbd57.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\start menu\~sdbd58.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\start menu\programs\~sd | | True | 1 | | | bd78.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\start menu\programs\acc | | True | 1 | | | essories\~sdbd79.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\start menu\programs\acc | | True | 1 | | | essories\accessibility\~sdbd8a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\start menu\programs\acc | | True | 1 | | | essories\system tools\~sdbd9b.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\start menu\programs\acc | | True | 1 | | | essories\tablet pc\~sdbd9c.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\start menu\programs\acc | | True | 1 | | | essories\windows powershell\~sdbdac.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\start menu\programs\adm | | True | 1 | | | inistrative tools\~sdbdad.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\start menu\programs\gam | | True | 1 | | | es\~sdbdae.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\start menu\programs\jav | | True | 1 | | | a\~sdbdbf.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\start menu\programs\mai | | True | 1 | | | ntenance\~sdbdc0.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\start menu\programs\sta | | True | 1 | | | rtup\~sdbe3e.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\start menu\programs\tab | | True | 1 | | | let pc\~sdbe3f.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\templates\~sdbe4f.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\wer\~sdbe50.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\wer\reportarchive\~sdbe | | True | 1 | | | 61.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\wer\reportarchive\noncr | | True | 1 | | | itical_x86_38e744f5ed92b6643d4610f93acebec71c7d44_03443294\~ | | | | | | sdbe62.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\wer\reportarchive\noncr | | True | 1 | | | itical_x86_5164e364f554d49c65173057b5da44f5956558a_03444874\ | | | | | | ~sdbe63.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\wer\reportarchive\noncr | | True | 1 | | | itical_x86_7125ba86c55facb797ac343822852efc7fde5bb0_03681e87 | | | | | | \~sdbe64.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\wer\reportqueue\~sdbe74 | | True | 1 | | | .tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\~sdbe85.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\definition upd | | True | 1 | | | ates\~sdbe86.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\definition upd | | True | 1 | | | ates\backup\~sdbe97.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\definition upd | | True | 1 | | | ates\updates\~sdbe98.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\definition upd | | True | 1 | | | ates\{21833c5a-be0d-427d-b68e-efa18747b9cf}\~sdbeb8.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\localcopy\~sdb | | True | 1 | | | eb9.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\quarantine\~sd | | True | 1 | | | bec9.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\scans\~sdbeca. | | True | 1 | | | tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\scans\cleansto | | True | 1 | | | re\~sdbedb.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\scans\cleansto | | True | 1 | | | re\entries\~sdbefb.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\scans\cleansto | | True | 1 | | | re\resourcedata\~sdbefc.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\scans\cleansto | | True | 1 | | | re\resources\~sdbf0d.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\scans\history\ | | True | 1 | | | ~sdbf0e.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\scans\history\ | | True | 1 | | | cachemanager\~sdbf0f.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\scans\history\ | | True | 1 | | | results\~sdbf1f.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\scans\history\ | | True | 1 | | | results\resource\~sdbf20.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\scans\history\ | | True | 1 | | | service\~sdbf41.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\scans\history\ | | True | 1 | | | store\~sdbf42.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows defender\support\~sdbf4 | | True | 1 | | | 3.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows nt\~sdbf53.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows nt\msfax\~sdbf64.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows nt\msfax\activitylog\~s | | True | 1 | | | dbf65.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows nt\msfax\common coverpa | | True | 1 | | | ges\~sdbf75.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows nt\msfax\common coverpa | | True | 1 | | | ges\en-us\~sdbf86.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows nt\msfax\inbox\~sdbf87. | | True | 1 | | | tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows nt\msfax\queue\~sdbf88. | | True | 1 | | | tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows nt\msfax\sentitems\~sdb | | True | 1 | | | f99.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\~ | | True | 1 | | | sdbf9a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\e | | True | 1 | | | n-us\~sdbf9b.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows nt\msscan\~sdbfab.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows nt\msscan\welcomescan.j | | False | 1 | | | pg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\wwansvc\~sdc048.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\mozilla\~sdc0c7.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\mozilla\logs\~sdc0c8.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\oracle\~sdc0d9.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\oracle\java\~sdc0da.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\oracle\java\.oracle_jre_usage\~sdc0ea.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\oracle\java\installcache\~sdc0eb.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\oracle\java\javapath\~sdc0ec.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\~sdc0fd.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\d4036846864773e3d647f421dfe | | True | 1 | | | 7f6ca536e307b\~sdc11d.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\d4036846864773e3d647f421dfe | | True | 1 | | | 7f6ca536e307b\packages\~sdc11e.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\d4036846864773e3d647f421dfe | | True | 1 | | | 7f6ca536e307b\packages\patch\~sdc11f.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\d4036846864773e3d647f421dfe | | True | 1 | | | 7f6ca536e307b\packages\patch\x86\~sdc13f.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{13a4ee12-23ea-3371-91ee-ef | | True | 1 | | | b36ddfff3e}v12.0.21005\~sdc140.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{13a4ee12-23ea-3371-91ee-ef | | True | 1 | | | b36ddfff3e}v12.0.21005\packages\~sdc151.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{13a4ee12-23ea-3371-91ee-ef | | True | 1 | | | b36ddfff3e}v12.0.21005\packages\vcruntimeminimum_x86\~sdc152 | | | | | | .tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{33d1fd90-4274-48a1-9bc1-97 | | True | 1 | | | e33d9c2d6f}\~sdc153.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{74d0e5db-b326-4dae-a6b2-44 | | True | 1 | | | 5b9de1836e}\~sdc154.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{a2563e55-3bec-3828-8d67-e5 | | True | 1 | | | e8b9e8b675}v14.0.23026\~sdc164.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{a2563e55-3bec-3828-8d67-e5 | | True | 1 | | | e8b9e8b675}v14.0.23026\packages\~sdc175.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{a2563e55-3bec-3828-8d67-e5 | | True | 1 | | | e8b9e8b675}v14.0.23026\packages\vcruntimeminimum_x86\~sdc176 | | | | | | .tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{b175520c-86a2-35a7-8619-86 | | True | 1 | | | dc379688b9}v11.0.61030\~sdc177.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{b175520c-86a2-35a7-8619-86 | | True | 1 | | | dc379688b9}v11.0.61030\packages\~sdc188.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{b175520c-86a2-35a7-8619-86 | | True | 1 | | | dc379688b9}v11.0.61030\packages\vcruntimeadditional_x86\~sdc | | | | | | 189.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{bd95a8cd-1d9f-35ad-981a-3e | | True | 1 | | | 7925026ebb}v11.0.61030\~sdc18a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{bd95a8cd-1d9f-35ad-981a-3e | | True | 1 | | | 7925026ebb}v11.0.61030\packages\~sdc18b.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{bd95a8cd-1d9f-35ad-981a-3e | | True | 1 | | | 7925026ebb}v11.0.61030\packages\vcruntimeminimum_x86\~sdc18c | | | | | | .tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{be960c1c-7bad-3de6-8b1a-26 | | True | 1 | | | 16fe532845}v14.0.23026\~sdc19c.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{be960c1c-7bad-3de6-8b1a-26 | | True | 1 | | | 16fe532845}v14.0.23026\packages\~sdc19d.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{be960c1c-7bad-3de6-8b1a-26 | | True | 1 | | | 16fe532845}v14.0.23026\packages\vcruntimeadditional_x86\~sdc | | | | | | 19e.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{e6e75766-da0f-4ba2-9788-6e | | True | 1 | | | a593ce702d}\~sdc1af.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{f8cfeb22-a2e7-3971-9eda-4b | | True | 1 | | | 11edefc185}v12.0.21005\~sdc1b0.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{f8cfeb22-a2e7-3971-9eda-4b | | True | 1 | | | 11edefc185}v12.0.21005\packages\~sdc1b1.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\package cache\{f8cfeb22-a2e7-3971-9eda-4b | | True | 1 | | | 11edefc185}v12.0.21005\packages\vcruntimeadditional_x86\~sdc | | | | | | 1c1.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\qxtqusdnjzrizx418\~sdc1c2.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\qxtqusdnjzrizx418\msg\~sdc1c3.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\~sdc1d4.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\~sdc1f4.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\~sdc1f5.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\~sdc206.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\credentials\~sdc236 | | True | 1 | | | .tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\feeds\~sdc237.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\feeds\microsoft fee | | True | 1 | | | ds~\~sdc247.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\feeds\{5588acfd-643 | | True | 1 | | | 6-411b-a5ce-666ae6a92d3d}~\~sdc258.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\feeds\{5588acfd-643 | | True | 1 | | | 6-411b-a5ce-666ae6a92d3d}~\webslices~\~sdc259.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\feeds cache\~sdc25a | | True | 1 | | | .tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\feeds cache\4cssrv0 | | True | 1 | | | 0\~sdc26a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\feeds cache\dt1gie4 | | True | 1 | | | d\~sdc26b.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\feeds cache\f6gei81 | | True | 1 | | | z\~sdc27c.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\feeds cache\gxo2h2p | | True | 1 | | | j\~sdc27d.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\internet explorer\~ | | True | 1 | | | sdc27e.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\internet explorer\b | | False | 1 | | | rndlog.txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\media player\~sdc29 | | True | 1 | | | e.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\media player\sync p | | True | 1 | | | laylists\~sdc29f.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\media player\sync p | | True | 1 | | | laylists\en-us\~sdc2a0.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\media player\sync p | | True | 1 | | | laylists\en-us\0000fdbe\~sdc2b1.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\~sdc2c1.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\burn\~sdc2d | | True | 1 | | | 2.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\burn\burn\~ | | True | 1 | | | sdc2d3.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\caches\~sdc | | True | 1 | | | 2d4.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\explorer\~s | | True | 1 | | | dc2d5.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\gameexplore | | True | 1 | | | r\~sdc2e6.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\history\~sd | | True | 1 | | | c2e7.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\history\his | | True | 1 | | | tory.ie5\~sdc2f7.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\history\low | | True | 1 | | | \~sdc2f8.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\ringtones\~ | | True | 1 | | | sdc2f9.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\wer\~sdc30a | | True | 1 | | | .tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\wer\erc\~sd | | True | 1 | | | c30b.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\wer\reporta | | True | 1 | | | rchive\~sdc30c.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\~sdc31 | | True | 1 | | | c.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\backup | | True | 1 | | | \~sdc31d.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\backup | | True | 1 | | | \new\~sdc32e.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | True | 1 | | | nery\~sdc33f.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\bears.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\garden.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\greenbubbles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\handprints.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\orangecircles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\peacock.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\roses.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\shadesofblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\softblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\stars.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows media\~sdc3 | | True | 1 | | | bc.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows media\12.0\ | | True | 1 | | | ~sdc3ec.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows sidebar\~sd | | True | 1 | | | c3ed.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows sidebar\gad | | True | 1 | | | gets\~sdc3ee.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\locallow\~sdc3ef.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\~sdc40f.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\identities\~sdc410.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\identities\{b85dca4a-5c21-4 | | True | 1 | | | ec5-af48-a2a88cd3d1d9}\~sdc411.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\~sdc422.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\credentials\~sdc4 | | True | 1 | | | 23.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\crypto\~sdc434.tm | | True | 1 | | | p | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\crypto\rsa\~sdc44 | | True | 1 | | | 4.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\internet explorer | | True | 1 | | | \~sdc445.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\internet explorer | | True | 1 | | | \quick launch\~sdc456.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\internet explorer | | True | 1 | | | \quick launch\user pinned\~sdc457.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\internet explorer | | True | 1 | | | \quick launch\user pinned\implicitappshortcuts\~sdc467.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\internet explorer | | True | 1 | | | \quick launch\user pinned\taskbar\~sdc478.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\protect\~sdc489.t | | True | 1 | | | mp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\protect\s-1-5-21- | | True | 1 | | | 892523515-1518344882-2423736544-500\~sdc48a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\systemcertificate | | True | 1 | | | s\~sdc49a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\systemcertificate | | True | 1 | | | s\my\~sdc49b.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\systemcertificate | | True | 1 | | | s\my\certificates\~sdc4ac.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\systemcertificate | | True | 1 | | | s\my\crls\~sdc4ad.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\systemcertificate | | True | 1 | | | s\my\ctls\~sdc4ae.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\~sdc4be.t | | True | 1 | | | mp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\cookies\~ | | True | 1 | | | sdc4cf.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\iecompatc | | True | 1 | | | ache\~sdc4d0.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\iecompatc | | True | 1 | | | ache\low\~sdc4e1.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\ietldcach | | True | 1 | | | e\~sdc4e2.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\ietldcach | | True | 1 | | | e\low\~sdc4e3.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\libraries | | True | 1 | | | \~sdc4e4.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\network s | | True | 1 | | | hortcuts\~sdc4f4.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\printer s | | True | 1 | | | hortcuts\~sdc4f5.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\privacie\ | | True | 1 | | | ~sdc4f6.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\privacie\ | | True | 1 | | | low\~sdc507.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\recent\~s | | True | 1 | | | dc508.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\recent\au | | True | 1 | | | tomaticdestinations\~sdc509.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\recent\cu | | True | 1 | | | stomdestinations\~sdc50a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\sendto\~s | | True | 1 | | | dc51a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\start men | | True | 1 | | | u\~sdc51b.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\start men | | True | 1 | | | u\programs\~sdc52c.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\start men | | True | 1 | | | u\programs\accessories\~sdc53d.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\start men | | True | 1 | | | u\programs\accessories\accessibility\~sdc53e.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\start men | | True | 1 | | | u\programs\accessories\system tools\~sdc54e.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\start men | | True | 1 | | | u\programs\administrative tools\~sdc55f.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\start men | | True | 1 | | | u\programs\maintenance\~sdc560.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\start men | | True | 1 | | | u\programs\startup\~sdc561.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\templates | | True | 1 | | | \~sdc562.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\themes\~s | | True | 1 | | | dc563.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\themes\tr | | False | 1 | | | anscodedwallpaper.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\contacts\~sdc5e1.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\desktop\~sdc5f1.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\documents\~sdc5f2.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\downloads\~sdc612.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\favorites\~sdc623.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\favorites\links\~sdc643.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\favorites\microsoft websites\~sdc654.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\favorites\msn websites\~sdc664.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\favorites\windows live\~sdc740.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\links\~sdc760.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\music\~sdc790.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\pictures\~sdc791.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\saved games\~sdc7a1.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\searches\~sdc7a2.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\videos\~sdc7b3.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\~sdc7b4.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\~sdc7e4.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\~sdc7f4.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\google\~sdc815.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\google\crashreports\~sdc81 | | True | 1 | | | 6.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\~sdc817.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\credentials\~sdc | | True | 1 | | | 827.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\event viewer\~sd | | True | 1 | | | c838.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\feeds\~sdc839.tm | | True | 1 | | | p | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\feeds\microsoft | | True | 1 | | | feeds~\~sdc849.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\feeds\{5588acfd- | | True | 1 | | | 6436-411b-a5ce-666ae6a92d3d}~\~sdc85a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\feeds\{5588acfd- | | True | 1 | | | 6436-411b-a5ce-666ae6a92d3d}~\webslices~\~sdc86b.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\feeds cache\~sdc | | True | 1 | | | 86c.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\feeds cache\4css | | True | 1 | | | rv00\~sdc87c.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\feeds cache\dt1g | | True | 1 | | | ie4d\~sdc87d.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\feeds cache\f6ge | | True | 1 | | | i81z\~sdc87e.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\feeds cache\gxo2 | | True | 1 | | | h2pj\~sdc87f.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | | True | 1 | | | r\~sdc890.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | | False | 1 | | | r\brndlog.txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | | True | 1 | | | r\recovery\~sdc8a0.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | | True | 1 | | | r\recovery\active\~sdc8b1.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | | True | 1 | | | r\recovery\last active\~sdc93e.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\media player\~sd | | True | 1 | | | c94f.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\media player\syn | | True | 1 | | | c playlists\~sdc950.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\media player\syn | | True | 1 | | | c playlists\en-us\~sdc961.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\media player\syn | | True | 1 | | | c playlists\en-us\0000cd9a\~sdc962.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\media player\syn | | True | 1 | | | c playlists\en-us\0000fdbe\~sdc972.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\taskschedulercon | | True | 1 | | | fig\~sdc983.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\~sdc984. | | True | 1 | | | tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\1033\~sd | | True | 1 | | | c994.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\burn\~sd | | True | 1 | | | c995.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\burn\bur | | True | 1 | | | n\~sdc996.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\burn\bur | | True | 1 | | | n1\~sdc9a7.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\~ | | True | 1 | | | sdc9a8.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | | True | 1 | | | \~sdc9a9.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\gameexpl | | True | 1 | | | orer\~sdc9ba.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | | True | 1 | | | ~sdc9bb.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | | True | 1 | | | history.ie5\~sdc9cb.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | | True | 1 | | | history.ie5\mshist012017051520170516\~sdc9cc.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | | True | 1 | | | low\~sdc9cd.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | | True | 1 | | | low\history.ie5\~sdc9de.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | | True | 1 | | | low\history.ie5\mshist012016110220161103\~sdc9ee.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\ringtone | | True | 1 | | | s\~sdc9ef.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\themes\~ | | True | 1 | | | sdc9f0.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\wer\~sdc | | True | 1 | | | a01.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\wer\erc\ | | True | 1 | | | ~sdca02.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\wer\repo | | True | 1 | | | rtarchive\~sdca03.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\wer\repo | | True | 1 | | | rtqueue\~sdca14.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\~sd | | True | 1 | | | ca15.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\bac | | True | 1 | | | kup\~sdca25.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\bac | | True | 1 | | | kup\new\~sdca26.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | True | 1 | | | tionery\~sdca27.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\bears.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\garden.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\greenbubbles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\handprints.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\orangecircles.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\peacock.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\roses.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\shadesofblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\softblue.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\stars.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows media\~s | | True | 1 | | | dcb22.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows media\12 | | True | 1 | | | .0\~sdcb23.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows sidebar\ | | True | 1 | | | ~sdcb24.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows sidebar\ | | True | 1 | | | gadgets\~sdcb34.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\virtualstore\~sdcb35.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\~sdcb36.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\microsoft\~sdcb47.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\microsoft\cryptneturlca | | True | 1 | | | che\~sdcb48.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\microsoft\cryptneturlca | | True | 1 | | | che\content\~sdcb49.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\microsoft\cryptneturlca | | True | 1 | | | che\metadata\~sdcb69.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | | True | 1 | | | orer\~sdcb7a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | | True | 1 | | | orer\domstore\~sdcb8a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | | True | 1 | | | orer\domstore\1ppol5zc\~sdcbab.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | | True | 1 | | | orer\domstore\68u8ihrk\~sdcbac.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | | True | 1 | | | orer\domstore\b10w93nd\~sdcbad.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | | True | 1 | | | orer\domstore\ls3151yd\~sdcbae.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | | True | 1 | | | orer\services\~sdcbaf.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\~sdcbbf.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\~sdcbc0.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\~sd | | True | 1 | | | cbd1.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\~sdcbe1.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\~sdcbf2.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\0\~sdcc70.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\1\~sdcc80.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\10\~sdcc91.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\11\~sdcc92.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\12\~sdcc93.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\13\~sdcca4.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\14\~sdcca5.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\15\~sdcca6.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\16\~sdcca7.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\17\~sdccb7.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\18\~sdccb8.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\19\~sdccb9.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\2\~sdccca.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\20\~sdccda.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\21\~sdcceb.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\22\~sdcd0b.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\23\~sdcd0c.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\24\~sdcd1d.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\25\~sdcd1e.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\26\~sdcd1f.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\27\~sdcd20.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\28\~sdcd30.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\29\~sdcd31.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\3\~sdcd42.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\30\~sdcd43.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\31\~sdcd54.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\32\~sdcd55.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\33\~sdcd56.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\34\~sdcd66.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\35\~sdcd67.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\36\~sdcd68.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\37\~sdcd69.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\38\~sdcd6a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\39\~sdcd7b.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\4\~sdcd7c.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\40\~sdcd8c.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\41\~sdcd8d.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\42\~sdcd8e.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\43\~sdcd9f.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\44\~sdcda0.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\45\~sdcda1.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\46\~sdcda2.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\47\~sdcda3.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\48\~sdcdb4.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\49\~sdcdb5.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\5\~sdcdb6.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\50\~sdcdb7.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\51\~sdcdb8.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\52\~sdcdc8.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\53\~sdcdc9.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\54\~sdcdca.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\55\~sdcddb.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\56\~sdcddc.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\57\~sdcddd.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\58\~sdcdde.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\59\~sdcddf.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\6\~sdcdef.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\60\~sdce00.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\61\~sdce01.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\62\~sdce02.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\63\~sdce03.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\7\~sdce23.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\8\~sdce24.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\9\~sdce25.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\host\~sdce36.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\muffin\~sdce37.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\6.0\tmp\~sdce38.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | | True | 1 | | | he\security\~sdce39.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\ext | | True | 1 | | | \~sdce3a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\log | | True | 1 | | | \~sdce3b.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\sec | | True | 1 | | | urity\~sdce4b.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\tmp | | True | 1 | | | \~sdce4c.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\tmp | | True | 1 | | | \si\~sdce4d.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\~sdce4e.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\d56ie.csv.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\dx-rnsk.jpg.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\ir5gaytbg.jpg.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\mpx3v.xlsx.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\o7p_l.xls.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\ozq_qxmblgn17n.pdf.wncry | | False | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\identities\~sdcf59.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\identities\{b85dca4a-5c2 | | True | 1 | | | 1-4ec5-af48-a2a88cd3d1d9}\~sdcf5a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\~sdcf6a.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\credentials\~s | | True | 1 | | | dcf6b.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\crypto\~sdcf7c | | True | 1 | | | .tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\crypto\rsa\~sd | | True | 1 | | | cf7d.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\crypto\rsa\s-1 | | True | 1 | | | -5-21-3385616887-338319549-3229196192-1000\~sdcf8d.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\internet explo | | True | 1 | | | rer\~sdcf8e.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\internet explo | | True | 1 | | | rer\quick launch\~sdcf8f.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\internet explo | | True | 1 | | | rer\quick launch\user pinned\~sdcfa0.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\internet explo | | True | 1 | | | rer\quick launch\user pinned\implicitappshortcuts\~sdcfb1.tm | | | | | | p | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\internet explo | | True | 1 | | | rer\quick launch\user pinned\taskbar\~sdcfb2.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\mmc\~sdcfc2.tm | | True | 1 | | | p | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\network\~sdcfd | | True | 1 | | | 3.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\network\connec | | True | 1 | | | tions\~sdcfd4.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\network\connec | | True | 1 | | | tions\pbk\~sdcfd5.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\network\connec | | True | 1 | | | tions\pbk\_hiddenpbk\~sdcfd6.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\protect\~sdcfe | | True | 1 | | | 6.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\protect\s-1-5- | | True | 1 | | | 21-3385616887-338319549-3229196192-1000\~sdcfe7.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\protect\s-1-5- | | True | 1 | | | 21-892523515-1518344882-2423736544-500\~sdcff8.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\systemcertific | | True | 1 | | | ates\~sdcff9.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\systemcertific | | True | 1 | | | ates\my\~sdcffa.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\systemcertific | | True | 1 | | | ates\my\certificates\~sdd087.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\systemcertific | | True | 1 | | | ates\my\crls\~sdd088.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\systemcertific | | True | 1 | | | ates\my\ctls\~sdd0e7.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\~sdd0e | | True | 1 | | | 8.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | | True | 1 | | | s\~sdd166.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | | True | 1 | | | s\low\~sdd176.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\iecomp | | True | 1 | | | atcache\~sdd177.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\iecomp | | True | 1 | | | atcache\low\~sdd178.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\ietldc | | True | 1 | | | ache\~sdd189.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\ietldc | | True | 1 | | | ache\low\~sdd18a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\librar | | True | 1 | | | ies\~sdd18b.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\networ | | True | 1 | | | k shortcuts\~sdd19c.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\printe | | True | 1 | | | r shortcuts\~sdd1ac.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\privac | | True | 1 | | | ie\~sdd1ad.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\privac | | True | 1 | | | ie\low\~sdd1be.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\recent | | True | 1 | | | \~sdd1bf.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\recent | | True | 1 | | | \automaticdestinations\~sdd25c.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\recent | | True | 1 | | | \customdestinations\~sdd26c.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\sendto | | True | 1 | | | \~sdd26d.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | | True | 1 | | | menu\~sdd26e.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | | True | 1 | | | menu\programs\~sdd27f.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | | True | 1 | | | menu\programs\accessories\~sdd290.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | | True | 1 | | | menu\programs\accessories\accessibility\~sdd2a0.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | | True | 1 | | | menu\programs\accessories\system tools\~sdd2a1.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | | True | 1 | | | menu\programs\administrative tools\~sdd2a2.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | | True | 1 | | | menu\programs\maintenance\~sdd2a3.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | | True | 1 | | | menu\programs\startup\~sdd2c3.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\templa | | True | 1 | | | tes\~sdd2c4.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\themes | | True | 1 | | | \~sdd2c5.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\themes | | False | 1 | | | \transcodedwallpaper.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\sun\~sdd334.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\sun\java\~sdd344.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\sun\java\deployment\~sdd | | True | 1 | | | 355.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\contacts\~sdd356.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\~sdd357.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\~sdd396.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\~sdd | | True | 1 | | | 3a7.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | | True | 1 | | | \~sdd3b7.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | True | 1 | | | ysj1\~sdd3c8.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | True | 1 | | | ysj1\2tpofaj-rucn\~sdd3d9.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\~sdd3f9.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\~sdd438.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\~sdd44 | | True | 1 | | | 9.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | | True | 1 | | | ~sdd459.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\~sd | | True | 1 | | | d46a.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | | True | 1 | | | c-nspy xfvlw3\~sdd47b.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\downloads\~sdd47c.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\favorites\~sdd48c.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\favorites\links\~sdd49d.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\favorites\microsoft websites\~sdd49e.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\favorites\msn websites\~sdd4ae.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\favorites\windows live\~sdd4af.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\links\~sdd4c0.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\~sdd4d1.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\~sdd4f1.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\~sdd511.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\~sdd522.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\~sdd59f.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\0-sd9l8u\~sdd5b0. | | True | 1 | | | tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\r4lsao\~sdd5c1.tm | | True | 1 | | | p | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\~sdd | | True | 1 | | | 5c2.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\~sdd5c3.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\55woz240.jpg.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\j5lndpj\~sdd612.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\j5lndpj\rely_w0.jpg.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\j5lndpj\txokdckrvk.jpg.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\~sdd651.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\u0low_3k9h1go | | False | 1 | | | py7.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\~sdd681.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\~sdd6a1.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\~sdd | | True | 1 | | | 6b2.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | | True | 1 | | | \~sdd6d2.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | | False | 1 | | | \uvrcjvwuev0rc6u9m.jpg.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\_2hzdo\~sdd79e.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\_2hzdo\soyiwozbtzrklfzgmav.jpg. | | False | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\saved games\~sdd7cd.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\searches\~sdd7ce.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\~sdd7df.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\~sdd83e.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\hakyslty-m-z9\~sdd85e.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\~sdd8bc.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\~sdd8cd.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | True | 1 | | | fq8j\~sdd8de.tmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\~sdd91d.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\desktop\~sdd92e.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\documents\~sdd92f.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\downloads\~sdd93f.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\favorites\~sdd940.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\libraries\~sdd98f.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\music\~sdd9a0.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\music\sample music\~sdd9d0.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\~sdd9e0.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\sample pictures\~sdd9e1.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\sample pictures\chrysanthemum.jpg.w | | False | 1 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\sample pictures\desert.jpg.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\sample pictures\hydrangeas.jpg.wncr | | False | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\sample pictures\jellyfish.jpg.wncry | | False | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\sample pictures\koala.jpg.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\sample pictures\lighthouse.jpg.wncr | | False | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\sample pictures\penguins.jpg.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\sample pictures\tulips.jpg.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\recorded tv\~sddeb3.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\recorded tv\sample media\~sddeb4.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\videos\~sddec4.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\videos\sample videos\~sddec5.tmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\bootsect.bak.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\device\{113527a4-4 | | False | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\background.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\device\{113527a4-4 | | False | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\device.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\device\{113527a4-4 | | False | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\overlay.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\device\{113527a4-4 | | False | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\superbar.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\device\{8702d817-5 | | False | 1 | | | aad-4674-9ef3-4d3decd87120}\background.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\device\{8702d817-5 | | False | 1 | | | aad-4674-9ef3-4d3decd87120}\watermark.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\search\data\applications\window | | False | 1 | | | s\windows.edb.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\guest.bmp | | False | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\user.bmp. | | False | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile10.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile11.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile12.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile13.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile14.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile15.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile16.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile17.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile18.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile19.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile20.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile21.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile22.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile23.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile24.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile25.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile26.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile27.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile28.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile29.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile30.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile31.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile32.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile33.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile34.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile35.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile36.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile37.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile38.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile39.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile40.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile41.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile42.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile43.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile44.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\caches\cversions.2.db.w | | False | 1 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\caches\{67d69890-d853-4 | | False | 1 | | | 011-a87e-aa64fa83ce5a}.2.ver0x0000000000000002.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | | False | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000004.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | | False | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | | False | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000006.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | | False | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000007.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\caches\{7cd55808-3d38-4 | | False | 1 | | | dd5-90c9-62f0e6ee60d4}.2.ver0x0000000000000001.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\caches\{ddf571f2-be98-4 | | False | 1 | | | 26d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 01.w | | False | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 02.w | | False | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 03.w | | False | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 04.w | | False | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 05.w | | False | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 06.w | | False | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 07.w | | False | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 08.w | | False | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 09.w | | False | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 10.w | | False | 1 | | | ma.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\e | | False | 1 | | | n-us\welcomefax.tif.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\iconcache.db.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\explorer\th | | False | 1 | | | umbcache_256.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\explorer\th | | False | 1 | | | umbcache_idx.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\iconcache.db.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | | False | 1 | | | r\brndlog.bak.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\c | | False | 1 | | | versions.1.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | | False | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000 | | | | | | f.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | | False | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001 | | | | | | 0.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | | False | 1 | | | \thumbcache_256.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | | False | 1 | | | \thumbcache_32.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | | False | 1 | | | \thumbcache_96.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | | False | 1 | | | \thumbcache_idx.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\bp7n0_qwtwkorxg.mp3.wncr | | False | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\bywi0qluwl3w9bud5f3o.gif | | False | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\dayij9-o1e8.bmp.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\dhlstwctu20.swf.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\djlklpzvvty.swf.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\dz0vptp5owvhzt.bmp.wncry | | False | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\g2kjjoggr_cgbs8b.flv.wnc | | False | 1 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\g_iap-kg5-s.wav.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\jqzjf0k.bmp.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\mhjvg24dofm.pps.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\nrae.png.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\o8fcddpbkgpe-.swf.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\ojefr7lfa6sgok2mjmm.mp3. | | False | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\orfn2vwitjww5.bmp.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\ph1dzo_.png.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\qq1a2p8piiy_edbcli.mkv.w | | False | 1 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\qwg2cvfqc9ez1jca.mp3.wnc | | False | 1 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\ra-n6lubasx5.swf.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\rjwem.avi.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\sh5e3mmjvux.mkv.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\sl9ersroh9zeq.png.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\uaebzgeiegneodnlxncn.mkv | | False | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\ultbjg f.pps.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\uywba9uh15vmu3etzhh-.mkv | | False | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\vsm1crhdjx95vtws.flv.wnc | | False | 1 | | | ryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\wgxrl2.odt.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\xdsqx_wxf9k9q.bmp.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\xf1j6kjktjpo ac8gr6.ots. | | False | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\zmej2xz6d3on_bh9gk7g.wav | | False | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\dfkh.wav.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\hmdiztpptjk3.wav.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\zptabq.mp3.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\lk-vjlkc3mbxebkrauk.wa | | False | 1 | | | v.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\9 bxr.wav.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\bm1lj1elmahv.wav. | | False | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\hwq_e63aib.wav.wn | | False | 1 | | | cryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\qni_.mp3.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\zhvacu3zm4pi0lqv. | | False | 1 | | | mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\0qrd5fx.mp3.wn | | False | 1 | | | cryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\vox09umk.mp3.w | | False | 1 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\2reugw.wav.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\4sarhcvjd04q.mp3. | | False | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\9z_ehnks.wav.wncr | | False | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\c5alotv4.wav.wncr | | False | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\kfqjlmnelq.mp3.wn | | False | 1 | | | cryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\mlx4g8dg4dbcwao4. | | False | 1 | | | wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\0-sd9l8u\dji4emfc | | False | 1 | | | xz9.wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\r4lsao\csxh-dp0pz | | False | 1 | | | vfbfnnd.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\gi9i | | False | 1 | | | p_csel.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\s9_2 | | False | 1 | | | q.wav.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\xysc | | False | 1 | | | fw4.mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\aicirck.gif.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\drba.bmp.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\eszy hkfdwfx0.bmp.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\imjwbtsshxgloi.gif.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\n5vvg0h1npv.bmp.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\pwvh0sxs 4u.gif.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\r9tluytrypiqhwf.gif.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\_y79.bmp.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\j5lndpj\5he-bihy791udb060xb.gif | | False | 1 | | | .wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\j5lndpj\jgg9piy6c.bmp.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\4r2l.png.wncr | | False | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\wosctyozygi-. | | False | 1 | | | png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\d0ifk_s5cqbrv.png.wncr | | False | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\h pgorp n6u.bmp.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\rgfjlx032dp7.gif.wncry | | False | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\wu4tbykxf6k0p.bmp.wncr | | False | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\xqj6y5vsd79ypdjyjlfn.p | | False | 1 | | | ng.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\zlpvbnitdrc.png.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\_nmlicbf8j8nqyjj7kp.bm | | False | 1 | | | p.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\2bzr.gif.wncry | | False | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\khl4ego4d 5rt4 | | False | 1 | | | l.bmp.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\spxsplgrt3p.pn | | False | 1 | | | g.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\xyz8ce1lhaimq. | | False | 1 | | | gif.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\awko | | False | 1 | | | rjfj_tbwlbiowt.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\mnu7 | | False | 1 | | | k.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\oxdt | | False | 1 | | | .png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | | False | 1 | | | \mhanq6ms_jz ssx.png.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\_2hzdo\8r-qyt.png.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\_2hzdo\ddw1j2dvm.bmp.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\_2hzdo\ehtgsx0.bmp.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\_2hzdo\oiputxj.png.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\_2hzdo\wxqsaaq6i.gif.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\0rt9n7waqqvk6-s.swf.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\gls-an3bnb6su.mkv.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\hi-kh7n3amacgd.mkv.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\ouvp28f9ewmi29.swf.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\rlh2om7hsceo6pzume.swf.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\676ht6zbx.mkv. | | False | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\929sjpu-xrkj3e | | False | 1 | | | 1t9j7.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\bcyq1.flv.wncr | | False | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\hve _ffgg.avi. | | False | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\oia-6xvkp.swf. | | False | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\peij538fk.mp4. | | False | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\hakyslty-m-z9\2iw7k-.mkv.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\hakyslty-m-z9\kdlazanuxnjlg4yrhvf | | False | 1 | | | q.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\hakyslty-m-z9\l1fq7b itpwhhcdab05 | | False | 1 | | | u.avi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\hakyslty-m-z9\lhhbjhevi.mkv.wncry | | False | 1 | | | t | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\hakyslty-m-z9\milwbj.flv.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\hakyslty-m-z9\mr1ex3.swf.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\hakyslty-m-z9\vc2cl4ln.mkv.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\4oj9yfl3dn.flv.wncr | | False | 1 | | | yt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\agmtjgfx.mkv.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\hsbc.mkv.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\hwj0zzo_r1q_pfff2.a | | False | 1 | | | vi.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\kj9gatk fbtmtzat.sw | | False | 1 | | | f.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\nbuaos9o4zd04f6rvgq | | False | 1 | | | y.swf.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\rh6x.mp4.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\_akuod4i4xu431o1mvn | | False | 1 | | | e.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\gdhhhwnb.flv.w | | False | 1 | | | ncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\t0_1iokbd.swf. | | False | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\vbvvvvb4i.mkv. | | False | 1 | | | wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ydjjqoani2hety | | False | 1 | | | 5e.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | False | 1 | | | fq8j\87xpzn.mp4.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | False | 1 | | | fq8j\dd3qogjnlsgkg1--_vs.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | False | 1 | | | fq8j\djqc-.mkv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | False | 1 | | | fq8j\immdtks6k.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | False | 1 | | | fq8j\osbg1m5t.flv.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | False | 1 | | | fq8j\qa9nxio402_he z.swf.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\music\sample music\kalimba.mp3.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\music\sample music\maid with the flaxen hair | | False | 1 | | | .mp3.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\music\sample music\sleep away.mp3.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\videos\sample videos\wildlife.wmv.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\autoexec.bat.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\explorer\th | | False | 1 | | | umbcache_1024.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\explorer\th | | False | 1 | | | umbcache_32.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\explorer\th | | False | 1 | | | umbcache_96.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\explorer\th | | False | 1 | | | umbcache_sr.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | | False | 1 | | | \thumbcache_1024.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | | False | 1 | | | \thumbcache_sr.db.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | | False | 1 | | | s\low\dssdpmx042@google[2].txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | | False | 1 | | | s\low\dssdpmx042@java[1].txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | | False | 1 | | | s\low\dssdpmx042@oracle.112.2o7[2].txt.wncryt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\hiberfil.sys.wncry | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\pagefile.sys.wncry | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\system volume information\{458a7c4b-78cd-11e5-8fa6-c8f981 | | False | 1 | | | b0cd47}{3808876b-c176-4e48-b7ae-04046e6cc752}.wncry | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\windows\temp\0.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\windows\temp\hibsys.wncryt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\bibagpmyuse2qjdfr.jpg | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\h yrmf.docx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\hwef8jg56gk9dlonf.csv | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2bnrt.xlsx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\qb17mfblutnx_jw3.jpg | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\xirvpsv.pptx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\z89la7110x3isdf6.doc | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\6pkpcf4uawt | | False | 2 | | | zg4xqlmdz.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | False | 2 | | | ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\3kmod_2d6ued.swf | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\acndlsz4zhbdyziqkotj.mp3 | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\ajkh5gnvfe8rqzavym.png | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\blw7.png | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\c9dt7ht6ochw_r.flv | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\fycbs5cumf6dh_fs.ods | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\gfs3quzvztmy-jq6xox.bmp | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\h4mzf.bmp | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\hyxaas7ppqlngg5ir6.mp4 | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\kit3qjluq u1ehoy.wav | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\lkwb.wav | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\m-flkfw.pps | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\p6tg4g.bmp | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\ytaj9x8n5wxojmujtmi.gif | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\zb1nbq.mp4 | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\zu3ocp3f88cn.flv | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\- jmajpm5_r | | False | 2 | | | ro.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\mf1nbo.swf | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ksln | | False | 2 | | | i5puyuj.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ntjk | | False | 2 | | | r9csa.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\nxds | | False | 2 | | | miu.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | | False | 2 | | | \2h9gjyzxutjtaj vlt76.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | | False | 2 | | | \9wcvzyuqncphgsqczkn.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | | False | 2 | | | \kpyogarb2ozckx549d.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | | False | 2 | | | \z8mf4.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | False | 2 | | | ysj1\tey_zyonktol5ojrt0io.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | False | 2 | | | ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | False | 2 | | | ysj1\2tpofaj-rucn\93pm.gif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | False | 2 | | | ysj1\2tpofaj-rucn\cxy8v.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | False | 2 | | | ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | False | 2 | | | ysj1\2tpofaj-rucn\yg84pi.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | False | 2 | | | ysj1\2tpofaj-rucn\yoo37jp7q.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\5dwumhpov0ond.doc | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\5pfcgtj7-40fzu.docx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\9c54.docx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\axmcb.docx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\f8t0d1hl8mulgw0ye.pptx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\g9fp hftlrgz5w.xls | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\gmphr0w6rrpdhpbef.csv | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\gpimnirm chkjuih.xlsx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\hemk7ngcvjguirn6.xlsx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\kqsfgiuuv7macle5kbe.pptx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\lsifcdcb6tbfbadh2jc.pptx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\lu6w3pxpu3ca.xlsx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\ly7o.pptx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\qocbs.docx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\tcrd9un1_myjq-.pptx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\wv7vnssgbfodzvw.xlsx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\yzoy0uk.pptx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\zwklqrq2nlske44p.xlsx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\_xgwdcsgf mjc6 j.docx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\-nap.rtf | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\9o_u.pdf | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\k6fadynloup1zicvtg0o.xl | | False | 2 | | | sx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\p3k5i8nny2aq5c.pptx | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\y5sy7w | | False | 2 | | | jt_a7krqnidgx.xlsx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | | False | 2 | | | sbxkqajovxqwlt.csv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\fxx | | False | 2 | | | fw-17sc6wh.ppt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\vsh | | False | 2 | | | y_qomhsb5w.ppt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | | False | 2 | | | c-nspy xfvlw3\coafenjkmrn.xlsx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\kqu8ojbhlzr.odp | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\qracrespejeu3.ods | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\t9kbu.ots | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\uigp.odp | | False | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\v3b5lp | | False | 2 | | | gbpfe06xmrqjo.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | | False | 2 | | | k_5vq4jhsw8guvo.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | | False | 2 | | | qbqa9 xzsel7xnah8.pps | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\bzr | | False | 2 | | | tj.pps | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\lo4 | | False | 2 | | | nczsaz.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\nqa | | False | 2 | | | -xbh.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | | False | 2 | | | c-nspy xfvlw3\-nos.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | | False | 2 | | | c-nspy xfvlw3\axtg6ai5-.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | | False | 2 | | | c-nspy xfvlw3\qz1senichq4fy3oijrd.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows nt\msscan\welcomescan.j | | False | 1 | | | pg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\internet explorer\b | | False | 1 | | | rndlog.txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\bears.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\garden.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\greenbubbles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\handprints.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\orangecircles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\peacock.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\roses.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\shadesofblue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\softblue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows mail\statio | | False | 1 | | | nery\stars.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\roaming\microsoft\windows\themes\tr | | False | 1 | | | anscodedwallpaper.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | | False | 1 | | | r\brndlog.txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\bears.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\garden.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\greenbubbles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\handprints.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\orangecircles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\peacock.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\roses.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\shadesofblue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\softblue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | False | 1 | | | tionery\stars.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\d56ie.csv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\dx-rnsk.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\ir5gaytbg.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\mpx3v.xlsx | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\o7p_l.xls | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\ozq_qxmblgn17n.pdf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\themes | | False | 1 | | | \transcodedwallpaper.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\55woz240.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\j5lndpj\rely_w0.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\j5lndpj\txokdckrvk.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\u0low_3k9h1go | | False | 1 | | | py7.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | | False | 1 | | | \uvrcjvwuev0rc6u9m.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\_2hzdo\soyiwozbtzrklfzgmav.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\sample pictures\chrysanthemum.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\sample pictures\desert.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\sample pictures\hydrangeas.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\sample pictures\jellyfish.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\sample pictures\koala.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\sample pictures\lighthouse.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\sample pictures\penguins.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\pictures\sample pictures\tulips.jpg | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\bootsect.bak | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\device\{113527a4-4 | | False | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\background.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\device\{113527a4-4 | | False | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\device.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\device\{113527a4-4 | | False | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\overlay.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\device\{113527a4-4 | | False | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\superbar.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\device\{8702d817-5 | | False | 1 | | | aad-4674-9ef3-4d3decd87120}\background.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\device stage\device\{8702d817-5 | | False | 1 | | | aad-4674-9ef3-4d3decd87120}\watermark.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\search\data\applications\window | | False | 1 | | | s\windows.edb | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\guest.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\user.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile10.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile11.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile12.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile13.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile14.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile15.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile16.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile17.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile18.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile19.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile20.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile21.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile22.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile23.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile24.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile25.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile26.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile27.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile28.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile29.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile30.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile31.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile32.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile33.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile34.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile35.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile36.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile37.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile38.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile39.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile40.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile41.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile42.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile43.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile44.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\caches\cversions.2.db | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\caches\{67d69890-d853-4 | | False | 1 | | | 011-a87e-aa64fa83ce5a}.2.ver0x0000000000000002.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | | False | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000004.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | | False | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | | False | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000006.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | | False | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000007.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\caches\{7cd55808-3d38-4 | | False | 1 | | | dd5-90c9-62f0e6ee60d4}.2.ver0x0000000000000001.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\caches\{ddf571f2-be98-4 | | False | 1 | | | 26d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 01.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 02.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 03.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 04.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 05.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 06.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 07.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 08.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 09.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows\ringtones\ringtone 10.w | | False | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\e | | False | 1 | | | n-us\welcomefax.tif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\iconcache.db | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\explorer\th | | False | 1 | | | umbcache_256.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\explorer\th | | False | 1 | | | umbcache_idx.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\iconcache.db | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | | False | 1 | | | r\brndlog.bak | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\c | | False | 1 | | | versions.1.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | | False | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000 | | | | | | f.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | | False | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001 | | | | | | 0.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | | False | 1 | | | \thumbcache_256.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | | False | 2 | | | \thumbcache_32.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | | False | 1 | | | \thumbcache_96.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | | False | 1 | | | \thumbcache_idx.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\bp7n0_qwtwkorxg.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\bywi0qluwl3w9bud5f3o.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\dayij9-o1e8.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\dhlstwctu20.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\djlklpzvvty.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\dz0vptp5owvhzt.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\g2kjjoggr_cgbs8b.flv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\g_iap-kg5-s.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\jqzjf0k.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\mhjvg24dofm.pps | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\nrae.png | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\o8fcddpbkgpe-.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\ojefr7lfa6sgok2mjmm.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\orfn2vwitjww5.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\ph1dzo_.png | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\qq1a2p8piiy_edbcli.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\qwg2cvfqc9ez1jca.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\ra-n6lubasx5.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\rjwem.avi | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\sh5e3mmjvux.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\sl9ersroh9zeq.png | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\uaebzgeiegneodnlxncn.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\ultbjg f.pps | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\uywba9uh15vmu3etzhh-.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\vsm1crhdjx95vtws.flv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\wgxrl2.odt | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\xdsqx_wxf9k9q.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\xf1j6kjktjpo ac8gr6.ots | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\zmej2xz6d3on_bh9gk7g.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\dfkh.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\hmdiztpptjk3.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\zptabq.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\lk-vjlkc3mbxebkrauk.wa | | False | 1 | | | v | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\9 bxr.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\bm1lj1elmahv.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\hwq_e63aib.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\qni_.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\zhvacu3zm4pi0lqv. | | False | 1 | | | mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\0qrd5fx.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\vox09umk.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\2reugw.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\4sarhcvjd04q.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\9z_ehnks.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\c5alotv4.wav | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\kfqjlmnelq.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\mlx4g8dg4dbcwao4. | | False | 1 | | | wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\0-sd9l8u\dji4emfc | | False | 1 | | | xz9.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\r4lsao\csxh-dp0pz | | False | 1 | | | vfbfnnd.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\gi9i | | False | 1 | | | p_csel.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\s9_2 | | False | 1 | | | q.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\xysc | | False | 1 | | | fw4.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\aicirck.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\drba.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\eszy hkfdwfx0.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\imjwbtsshxgloi.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\n5vvg0h1npv.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\pwvh0sxs 4u.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\r9tluytrypiqhwf.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\_y79.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\j5lndpj\5he-bihy791udb060xb.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\j5lndpj\jgg9piy6c.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\4r2l.png | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\wosctyozygi-. | | False | 1 | | | png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\d0ifk_s5cqbrv.png | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\h pgorp n6u.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\rgfjlx032dp7.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\wu4tbykxf6k0p.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\xqj6y5vsd79ypdjyjlfn.p | | False | 1 | | | ng | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\zlpvbnitdrc.png | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\_nmlicbf8j8nqyjj7kp.bm | | False | 1 | | | p | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\2bzr.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\khl4ego4d 5rt4 | | False | 1 | | | l.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\spxsplgrt3p.pn | | False | 1 | | | g | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\xyz8ce1lhaimq. | | False | 1 | | | gif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\awko | | False | 1 | | | rjfj_tbwlbiowt.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\mnu7 | | False | 1 | | | k.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\oxdt | | False | 1 | | | .png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | | False | 1 | | | \mhanq6ms_jz ssx.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\_2hzdo\8r-qyt.png | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\_2hzdo\ddw1j2dvm.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\_2hzdo\ehtgsx0.bmp | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\_2hzdo\oiputxj.png | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\pictures\_2hzdo\wxqsaaq6i.gif | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\0rt9n7waqqvk6-s.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\gls-an3bnb6su.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\hi-kh7n3amacgd.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\ouvp28f9ewmi29.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\rlh2om7hsceo6pzume.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\676ht6zbx.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\929sjpu-xrkj3e | | False | 1 | | | 1t9j7.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\bcyq1.flv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\hve _ffgg.avi | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\oia-6xvkp.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\peij538fk.mp4 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\hakyslty-m-z9\2iw7k-.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\hakyslty-m-z9\kdlazanuxnjlg4yrhvf | | False | 1 | | | q.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\hakyslty-m-z9\l1fq7b itpwhhcdab05 | | False | 1 | | | u.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\hakyslty-m-z9\lhhbjhevi.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\hakyslty-m-z9\milwbj.flv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\hakyslty-m-z9\mr1ex3.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\hakyslty-m-z9\vc2cl4ln.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\4oj9yfl3dn.flv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\agmtjgfx.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\hsbc.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\hwj0zzo_r1q_pfff2.a | | False | 1 | | | vi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\kj9gatk fbtmtzat.sw | | False | 1 | | | f | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\nbuaos9o4zd04f6rvgq | | False | 1 | | | y.swf | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\rh6x.mp4 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\_akuod4i4xu431o1mvn | | False | 1 | | | e.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\gdhhhwnb.flv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\t0_1iokbd.swf | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\vbvvvvb4i.mkv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ydjjqoani2hety | | False | 1 | | | 5e.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | False | 1 | | | fq8j\87xpzn.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | False | 1 | | | fq8j\dd3qogjnlsgkg1--_vs.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | False | 1 | | | fq8j\djqc-.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | False | 1 | | | fq8j\immdtks6k.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | False | 1 | | | fq8j\osbg1m5t.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | False | 1 | | | fq8j\qa9nxio402_he z.swf | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\music\sample music\kalimba.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\music\sample music\maid with the flaxen hair | | False | 1 | | | .mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\music\sample music\sleep away.mp3 | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\public\videos\sample videos\wildlife.wmv | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\autoexec.bat | | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\explorer\th | | False | 1 | | | umbcache_1024.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\explorer\th | | False | 1 | | | umbcache_32.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\explorer\th | | False | 1 | | | umbcache_96.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\default\appdata\local\microsoft\windows\explorer\th | | False | 1 | | | umbcache_sr.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | | False | 1 | | | \thumbcache_1024.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | | False | 1 | | | s\low\dssdpmx042@google[2].txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | | False | 1 | | | s\low\dssdpmx042@java[1].txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | delete | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | | False | 1 | | | s\low\dssdpmx042@oracle.112.2o7[2].txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\programdata\qxtqusdnjzrizx418\@wanadecryptor@.exe | source_file_name = c:\programdata\qxtqusdnjzrizx418\u.wnry, | True | 1 | | | | fail_if_exists = 0 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\@wanadecryptor@.exe | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\@please_rea | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | d_me@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\@wanadecryp | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | False | 1 | | | tor@.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\@ple | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | ase_read_me@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\@wan | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | False | 1 | | | adecryptor@.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | \@please_read_me@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | False | 1 | | | \@wanadecryptor@.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | ysj1\@please_read_me@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | False | 1 | | | ysj1\@wanadecryptor@.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\documents\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\documents\@wanadecryptor@.exe | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\documents\z-zdwb\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\documents\z-zdwb\@wanadecryptor@.exe.lnk | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\@pleas | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | e_read_me@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\@wanad | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | ecryptor@.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\@pl | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | ease_read_me@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\@wa | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | nadecryptor@.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\@wanadecryptor@.exe | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\system volume information\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\system volume information\@wanadecryptor@.exe | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\all users\microsoft\user account pictures\@please_r | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | ead_me@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\all users\microsoft\user account pictures\@wanadecr | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | yptor@.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | ictures\@please_read_me@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | ictures\@wanadecryptor@.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\all users\microsoft\windows\caches\@please_read_me@ | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | .txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\all users\microsoft\windows\caches\@wanadecryptor@. | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\all users\microsoft\windows\ringtones\@please_read_ | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | me@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\all users\microsoft\windows\ringtones\@wanadecrypto | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | r@.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\all users\microsoft\windows nt\msscan\@please_read_ | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | me@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\all users\microsoft\windows nt\msscan\@wanadecrypto | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | r@.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\default\appdata\local\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\default\appdata\local\@wanadecryptor@.exe.lnk | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\appdata\local\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\appdata\local\@wanadecryptor@.exe.lnk | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\appdata\roaming\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\appdata\roaming\@wanadecryptor@.exe.lnk | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | False | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\@wanadecryptor@.exe | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | False | 2 | | | | ryptor@.exe, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\@please_rea | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | False | 1 | | | d_me@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\@wanadecryp | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | tor@.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\@ple | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | False | 1 | | | ase_read_me@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\@wan | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | adecryptor@.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | False | 1 | | | \@please_read_me@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | \@wanadecryptor@.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | False | 1 | | | ysj1\@please_read_me@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | ysj1\@wanadecryptor@.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\documents\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | False | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\documents\@wanadecryptor@.exe | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | False | 1 | | | | ryptor@.exe, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\documents\z-zdwb\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | False | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\documents\z-zdwb\@wanadecryptor@.exe.lnk | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | False | 1 | | | | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\@pleas | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | False | 1 | | | e_read_me@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\@wanad | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | False | 1 | | | ecryptor@.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\@pl | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | False | 1 | | | ease_read_me@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\@wa | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | False | 1 | | | nadecryptor@.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\music\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\music\@wanadecryptor@.exe | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\music\ipzul2xxs j\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\music\ipzul2xxs j\@wanadecryptor@.exe.ln | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | k | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\@please_read_me@. | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\@wanadecryptor@.e | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | xe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\@please_read_m | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | e@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\@wanadecryptor | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | @.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\@please_read_me@. | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\@wanadecryptor@.e | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | xe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\pictures\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\pictures\@wanadecryptor@.exe | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\pictures\j5lndpj\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\pictures\j5lndpj\@wanadecryptor@.exe.lnk | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\@please_read_ | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | me@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\@wanadecrypto | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | r@.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\pictures\qrgufb3m\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\pictures\qrgufb3m\@wanadecryptor@.exe.ln | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | k | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\@please_read_m | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | e@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\@wanadecryptor | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | @.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\pictures\_2hzdo\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\pictures\_2hzdo\@wanadecryptor@.exe.lnk | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\videos\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\videos\@wanadecryptor@.exe | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\@please_read_m | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | e@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\@wanadecryptor | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | @.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\videos\hakyslty-m-z9\@please_read_me@.tx | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | t | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\videos\hakyslty-m-z9\@wanadecryptor@.exe | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | .lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\videos\jycsy200xq5sf\@please_read_me@.tx | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | t | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\videos\jycsy200xq5sf\@wanadecryptor@.exe | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | .lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\@please_read_m | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | e@.txt | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\@wanadecryptor | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | @.exe.lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\public\music\sample music\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\public\music\sample music\@wanadecryptor@.exe.lnk | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\public\pictures\sample pictures\@please_read_me@.tx | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | t | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\public\pictures\sample pictures\@wanadecryptor@.exe | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | .lnk | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\public\videos\sample videos\@please_read_me@.txt | source_file_name = c:\programdata\qxtqusdnjzrizx418\@please_ | True | 1 | | | | read_me@.txt, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\public\videos\sample videos\@wanadecryptor@.exe.lnk | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe.lnk, fail_if_exists = 1 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\all users\desktop\@wanadecryptor@.bmp | source_file_name = c:\programdata\qxtqusdnjzrizx418\b.wnry, | True | 1 | | | | fail_if_exists = 0 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\all users\desktop\@wanadecryptor@.exe | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe, fail_if_exists = 0 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\default\desktop\@wanadecryptor@.bmp | source_file_name = c:\programdata\qxtqusdnjzrizx418\b.wnry, | True | 1 | | | | fail_if_exists = 0 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\default\desktop\@wanadecryptor@.exe | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe, fail_if_exists = 0 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\default user\desktop\@wanadecryptor@.bmp | source_file_name = c:\programdata\qxtqusdnjzrizx418\b.wnry, | True | 1 | | | | fail_if_exists = 0 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\default user\desktop\@wanadecryptor@.exe | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe, fail_if_exists = 0 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\dssdpmx042\desktop\@wanadecryptor@.bmp | source_file_name = c:\programdata\qxtqusdnjzrizx418\b.wnry, | True | 1 | | | | fail_if_exists = 0 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\public\desktop\@wanadecryptor@.bmp | source_file_name = c:\programdata\qxtqusdnjzrizx418\b.wnry, | True | 1 | | | | fail_if_exists = 0 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | copy | c:\users\public\desktop\@wanadecryptor@.exe | source_file_name = c:\programdata\qxtqusdnjzrizx418\@wanadec | True | 1 | | | | ryptor@.exe, fail_if_exists = 0 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\desktop\~sd927e.tmp | path = C:\Users\Default\Desktop, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default user\desktop\~sd92dd.tmp | path = C:\Users\Default User\Desktop, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\desktop\~sd92ed.tmp | path = C:\Users\DSsDPMx042\Desktop, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\~sd9761.tmp | path = C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX, pre | True | 1 | | | | fix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\~sd9 | path = C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\0qdv | True | 1 | | | 7c0.tmp | mG, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | path = C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vA | True | 1 | | | \~sd983e.tmp | hpvastg, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | path = C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXS | True | 1 | | | ysj1\~sd98ac.tmp | fGzRgx3ySj1, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | path = C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXS | True | 1 | | | ysj1\2tpofaj-rucn\~sd98dc.tmp | fGzRgx3ySj1\2TpOfAj-RuCN, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\public\desktop\~sda1e1.tmp | path = C:\Users\Public\Desktop, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\documents\~sda433.tmp | path = C:\Users\Default\Documents, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default user\documents\~sda444.tmp | path = C:\Users\Default User\Documents, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\documents\~sda493.tmp | path = C:\Users\DSsDPMx042\Documents, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\documents\z-zdwb\~sdb085.tmp | path = C:\Users\DSsDPMx042\Documents\Z-ZDWB, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\~sdb28 | path = C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC | True | 1 | | | 9.tmp | , prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | path = C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC | True | 1 | | | ~sdb2f7.tmp | \3e4HO, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\~sd | path = C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1S | True | 1 | | | b356.tmp | rgU, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | path = C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1S | True | 1 | | | c-nspy xfvlw3\~sdb412.tmp | rgU\TEDc-NsPy XFVlW3, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\public\documents\~sdb72f.tmp | path = C:\Users\Public\Documents, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\~sdb73f.tmp | path = C:, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\$recycle.bin\~sdb79e.tmp | path = C:\$Recycle.Bin, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\$recycle.bin\s-1-5-21-3385616887-338319549-3229196192-100 | path = C:\$Recycle.Bin\S-1-5-21-3385616887-338319549-3229196 | True | 1 | | | 0\~sdb79f.tmp | 192-1000, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\~sdb7bf.tmp | path = C:\Boot, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\cs-cz\~sdb81e.tmp | path = C:\Boot\cs-CZ, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\da-dk\~sdb82e.tmp | path = C:\Boot\da-DK, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\de-de\~sdb84f.tmp | path = C:\Boot\de-DE, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\el-gr\~sdb85f.tmp | path = C:\Boot\el-GR, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\en-us\~sdb870.tmp | path = C:\Boot\en-US, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\es-es\~sdb890.tmp | path = C:\Boot\es-ES, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\fi-fi\~sdb8b0.tmp | path = C:\Boot\fi-FI, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\fonts\~sdb8e0.tmp | path = C:\Boot\Fonts, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\fr-fr\~sdb93f.tmp | path = C:\Boot\fr-FR, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\hu-hu\~sdb95f.tmp | path = C:\Boot\hu-HU, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\it-it\~sdb96f.tmp | path = C:\Boot\it-IT, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\ja-jp\~sdb980.tmp | path = C:\Boot\ja-JP, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\ko-kr\~sdb991.tmp | path = C:\Boot\ko-KR, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\nb-no\~sdb9a1.tmp | path = C:\Boot\nb-NO, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\nl-nl\~sdb9b2.tmp | path = C:\Boot\nl-NL, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\pl-pl\~sdb9c2.tmp | path = C:\Boot\pl-PL, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\pt-br\~sdb9d3.tmp | path = C:\Boot\pt-BR, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\pt-pt\~sdb9e4.tmp | path = C:\Boot\pt-PT, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\ru-ru\~sdb9e5.tmp | path = C:\Boot\ru-RU, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\sv-se\~sdb9f5.tmp | path = C:\Boot\sv-SE, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\tr-tr\~sdb9f6.tmp | path = C:\Boot\tr-TR, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\zh-cn\~sdba07.tmp | path = C:\Boot\zh-CN, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\zh-hk\~sdba17.tmp | path = C:\Boot\zh-HK, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\boot\zh-tw\~sdba18.tmp | path = C:\Boot\zh-TW, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\perflogs\~sdba29.tmp | path = C:\PerfLogs, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\perflogs\admin\~sdba2a.tmp | path = C:\PerfLogs\Admin, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\recovery\~sdba2b.tmp | path = C:\Recovery, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\recovery\a8ef0822-7920-11e5-85b1-fee83b99d226\~sdba3c.tmp | path = C:\Recovery\a8ef0822-7920-11e5-85b1-fee83b99d226, pre | True | 1 | | | | fix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\system volume information\~sdba4c.tmp | path = C:\System Volume Information, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\system volume information\spp\~sdba8c.tmp | path = C:\System Volume Information\SPP, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\system volume information\spp\onlinemetadatacache\~sdba9c | path = C:\System Volume Information\SPP\OnlineMetadataCache, | True | 1 | | | .tmp | prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\system volume information\spp\sppcbshivestore\~sdbaad.tmp | path = C:\System Volume Information\SPP\SppCbsHiveStore, pre | True | 1 | | | | fix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\system volume information\spp\sppgroupcache\~sdbaae.tmp | path = C:\System Volume Information\SPP\SppGroupCache, prefi | True | 1 | | | | x = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\~sdbabe.tmp | path = C:\Users, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\~sdbacf.tmp | path = C:\Users\All Users, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\~sdbaff.tmp | path = C:\Users\All Users\Microsoft, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\assistance\~sdbb2f.tmp | path = C:\Users\All Users\Microsoft\Assistance, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\assistance\client\~sdbb30.tmp | path = C:\Users\All Users\Microsoft\Assistance\Client, prefi | True | 1 | | | | x = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\assistance\client\1.0\~sdbb31.t | path = C:\Users\All Users\Microsoft\Assistance\Client\1.0, p | True | 1 | | | mp | refix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\assistance\client\1.0\en-us\~sd | path = C:\Users\All Users\Microsoft\Assistance\Client\1.0\en | True | 1 | | | bb41.tmp | -US, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\crypto\~sdbb52.tmp | path = C:\Users\All Users\Microsoft\Crypto, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\crypto\dss\~sdbb53.tmp | path = C:\Users\All Users\Microsoft\Crypto\DSS, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\crypto\dss\machinekeys\~sdbb54. | path = C:\Users\All Users\Microsoft\Crypto\DSS\MachineKeys, | True | 1 | | | tmp | prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\crypto\keys\~sdbb64.tmp | path = C:\Users\All Users\Microsoft\Crypto\Keys, prefix = ~S | True | 1 | | | | D | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\crypto\rsa\~sdbb65.tmp | path = C:\Users\All Users\Microsoft\Crypto\RSA, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\crypto\rsa\machinekeys\~sdbb66. | path = C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys, | True | 1 | | | tmp | prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\crypto\rsa\s-1-5-18\~sdbb77.tmp | path = C:\Users\All Users\Microsoft\Crypto\RSA\S-1-5-18, pre | True | 1 | | | | fix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\device stage\~sdbb78.tmp | path = C:\Users\All Users\Microsoft\Device Stage, prefix = ~ | True | 1 | | | | SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\device stage\device\~sdbb89.tmp | path = C:\Users\All Users\Microsoft\Device Stage\Device, pre | True | 1 | | | | fix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\device stage\device\{113527a4-4 | path = C:\Users\All Users\Microsoft\Device Stage\Device\{113 | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\~sdbb8a.tmp | 527a4-45d4-4b6f-b567-97838f1b04b0}, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\device stage\device\{8702d817-5 | path = C:\Users\All Users\Microsoft\Device Stage\Device\{870 | True | 1 | | | aad-4674-9ef3-4d3decd87120}\~sdbb9a.tmp | 2d817-5aad-4674-9ef3-4d3decd87120}, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\device stage\task\~sdbb9b.tmp | path = C:\Users\All Users\Microsoft\Device Stage\Task, prefi | True | 1 | | | | x = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\device stage\task\{07deb856-fc6 | path = C:\Users\All Users\Microsoft\Device Stage\Task\{07deb | True | 1 | | | e-4fb9-8add-d8f2cf8722c9}\~sdbb9c.tmp | 856-fc6e-4fb9-8add-d8f2cf8722c9}, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\device stage\task\{07deb856-fc6 | path = C:\Users\All Users\Microsoft\Device Stage\Task\{07deb | True | 1 | | | e-4fb9-8add-d8f2cf8722c9}\en-us\~sdbbad.tmp | 856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\device stage\task\{e35be42d-f74 | path = C:\Users\All Users\Microsoft\Device Stage\Task\{e35be | True | 1 | | | 2-4d96-a50a-1775fb1a7a42}\~sdbbae.tmp | 42d-f742-4d96-a50a-1775fb1a7a42}, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\device stage\task\{e35be42d-f74 | path = C:\Users\All Users\Microsoft\Device Stage\Task\{e35be | True | 1 | | | 2-4d96-a50a-1775fb1a7a42}\en-us\~sdbbbe.tmp | 42d-f742-4d96-a50a-1775fb1a7a42}\en-US, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\devicesync\~sdbbcf.tmp | path = C:\Users\All Users\Microsoft\DeviceSync, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\drm\~sdbbd0.tmp | path = C:\Users\All Users\Microsoft\DRM, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\drm\server\~sdbbe1.tmp | path = C:\Users\All Users\Microsoft\DRM\Server, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\ehome\~sdbbe2.tmp | path = C:\Users\All Users\Microsoft\eHome, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\ehome\logs\~sdbbe3.tmp | path = C:\Users\All Users\Microsoft\eHome\logs, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\event viewer\~sdbbe4.tmp | path = C:\Users\All Users\Microsoft\Event Viewer, prefix = ~ | True | 1 | | | | SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\event viewer\views\~sdbbf4.tmp | path = C:\Users\All Users\Microsoft\Event Viewer\Views, pref | True | 1 | | | | ix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\event viewer\views\applicationv | path = C:\Users\All Users\Microsoft\Event Viewer\Views\Appli | True | 1 | | | iewsrootnode\~sdbbf5.tmp | cationViewsRootNode, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\identitycrl\~sdbbf6.tmp | path = C:\Users\All Users\Microsoft\IdentityCRL, prefix = ~S | True | 1 | | | | D | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\media player\~sdbc07.tmp | path = C:\Users\All Users\Microsoft\Media Player, prefix = ~ | True | 1 | | | | SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\mf\~sdbc08.tmp | path = C:\Users\All Users\Microsoft\MF, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\network\~sdbc09.tmp | path = C:\Users\All Users\Microsoft\Network, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\network\connections\~sdbc0a.tmp | path = C:\Users\All Users\Microsoft\Network\Connections, pre | True | 1 | | | | fix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\network\downloader\~sdbc59.tmp | path = C:\Users\All Users\Microsoft\Network\Downloader, pref | True | 1 | | | | ix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\rac\~sdbc5a.tmp | path = C:\Users\All Users\Microsoft\RAC, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\rac\outbound\~sdbc6a.tmp | path = C:\Users\All Users\Microsoft\RAC\Outbound, prefix = ~ | True | 1 | | | | SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\rac\publisheddata\~sdbc7b.tmp | path = C:\Users\All Users\Microsoft\RAC\PublishedData, prefi | True | 1 | | | | x = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\rac\statedata\~sdbc7c.tmp | path = C:\Users\All Users\Microsoft\RAC\StateData, prefix = | True | 1 | | | | ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\rac\temp\~sdbc7d.tmp | path = C:\Users\All Users\Microsoft\RAC\Temp, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\search\~sdbc7e.tmp | path = C:\Users\All Users\Microsoft\Search, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\search\data\~sdbc8f.tmp | path = C:\Users\All Users\Microsoft\Search\Data, prefix = ~S | True | 1 | | | | D | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\search\data\applications\~sdbc9 | path = C:\Users\All Users\Microsoft\Search\Data\Applications | True | 1 | | | 0.tmp | , prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\search\data\applications\window | path = C:\Users\All Users\Microsoft\Search\Data\Applications | True | 1 | | | s\~sdbca0.tmp | \Windows, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\search\data\applications\window | path = C:\Users\All Users\Microsoft\Search\Data\Applications | True | 1 | | | s\config\~sdbca1.tmp | \Windows\Config, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\search\data\applications\window | path = C:\Users\All Users\Microsoft\Search\Data\Applications | True | 1 | | | s\gatherlogs\~sdbca2.tmp | \Windows\GatherLogs, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\search\data\applications\window | path = C:\Users\All Users\Microsoft\Search\Data\Applications | True | 1 | | | s\gatherlogs\systemindex\~sdbcb3.tmp | \Windows\GatherLogs\SystemIndex, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\search\data\applications\window | path = C:\Users\All Users\Microsoft\Search\Data\Applications | True | 1 | | | s\projects\~sdbcb4.tmp | \Windows\Projects, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\search\data\applications\window | path = C:\Users\All Users\Microsoft\Search\Data\Applications | True | 1 | | | s\projects\systemindex\~sdbcb5.tmp | \Windows\Projects\SystemIndex, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\search\data\applications\window | path = C:\Users\All Users\Microsoft\Search\Data\Applications | True | 1 | | | s\projects\systemindex\indexer\~sdbcb6.tmp | \Windows\Projects\SystemIndex\Indexer, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\search\data\applications\window | path = C:\Users\All Users\Microsoft\Search\Data\Applications | True | 1 | | | s\projects\systemindex\indexer\cifiles\~sdbcb7.tmp | \Windows\Projects\SystemIndex\Indexer\CiFiles, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\search\data\applications\window | path = C:\Users\All Users\Microsoft\Search\Data\Applications | True | 1 | | | s\projects\systemindex\propmap\~sdbcb8.tmp | \Windows\Projects\SystemIndex\PropMap, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\search\data\applications\window | path = C:\Users\All Users\Microsoft\Search\Data\Applications | True | 1 | | | s\projects\systemindex\secstore\~sdbcb9.tmp | \Windows\Projects\SystemIndex\SecStore, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\search\data\temp\~sdbcba.tmp | path = C:\Users\All Users\Microsoft\Search\Data\Temp, prefix | True | 1 | | | | = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\user account pictures\~sdbcbb.t | path = C:\Users\All Users\Microsoft\User Account Pictures, p | True | 1 | | | mp | refix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\user account pictures\default p | path = C:\Users\All Users\Microsoft\User Account Pictures\De | True | 1 | | | ictures\~sdbccb.tmp | fault Pictures, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\vault\~sdbcdc.tmp | path = C:\Users\All Users\Microsoft\Vault, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\~sdbcdd.tmp | path = C:\Users\All Users\Microsoft\Windows, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\ait\~sdbcde.tmp | path = C:\Users\All Users\Microsoft\Windows\AIT, prefix = ~S | True | 1 | | | | D | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\caches\~sdbcef.tmp | path = C:\Users\All Users\Microsoft\Windows\Caches, prefix = | True | 1 | | | | ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\devicemetadatastore\~sd | path = C:\Users\All Users\Microsoft\Windows\DeviceMetadataSt | True | 1 | | | bcf0.tmp | ore, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\devicemetadatastore\en- | path = C:\Users\All Users\Microsoft\Windows\DeviceMetadataSt | True | 1 | | | us\~sdbd00.tmp | ore\en-US, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\drm\~sdbd11.tmp | path = C:\Users\All Users\Microsoft\Windows\DRM, prefix = ~S | True | 1 | | | | D | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\drm\cache\~sdbd12.tmp | path = C:\Users\All Users\Microsoft\Windows\DRM\Cache, prefi | True | 1 | | | | x = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\gameexplorer\~sdbd13.tm | path = C:\Users\All Users\Microsoft\Windows\GameExplorer, pr | True | 1 | | | p | efix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\power efficiency diagno | path = C:\Users\All Users\Microsoft\Windows\Power Efficiency | True | 1 | | | stics\~sdbd23.tmp | Diagnostics, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\ringtones\~sdbd24.tmp | path = C:\Users\All Users\Microsoft\Windows\Ringtones, prefi | True | 1 | | | | x = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\sqm\~sdbd45.tmp | path = C:\Users\All Users\Microsoft\Windows\Sqm, prefix = ~S | True | 1 | | | | D | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\sqm\manifest\~sdbd55.tm | path = C:\Users\All Users\Microsoft\Windows\Sqm\Manifest, pr | True | 1 | | | p | efix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\sqm\sessions\~sdbd56.tm | path = C:\Users\All Users\Microsoft\Windows\Sqm\Sessions, pr | True | 1 | | | p | efix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\sqm\upload\~sdbd57.tmp | path = C:\Users\All Users\Microsoft\Windows\Sqm\Upload, pref | True | 1 | | | | ix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\start menu\~sdbd58.tmp | path = C:\Users\All Users\Microsoft\Windows\Start Menu, pref | True | 1 | | | | ix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\start menu\programs\~sd | path = C:\Users\All Users\Microsoft\Windows\Start Menu\Progr | True | 1 | | | bd78.tmp | ams, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\start menu\programs\acc | path = C:\Users\All Users\Microsoft\Windows\Start Menu\Progr | True | 1 | | | essories\~sdbd79.tmp | ams\Accessories, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\start menu\programs\acc | path = C:\Users\All Users\Microsoft\Windows\Start Menu\Progr | True | 1 | | | essories\accessibility\~sdbd8a.tmp | ams\Accessories\Accessibility, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\start menu\programs\acc | path = C:\Users\All Users\Microsoft\Windows\Start Menu\Progr | True | 1 | | | essories\system tools\~sdbd9b.tmp | ams\Accessories\System Tools, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\start menu\programs\acc | path = C:\Users\All Users\Microsoft\Windows\Start Menu\Progr | True | 1 | | | essories\tablet pc\~sdbd9c.tmp | ams\Accessories\Tablet PC, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\start menu\programs\acc | path = C:\Users\All Users\Microsoft\Windows\Start Menu\Progr | True | 1 | | | essories\windows powershell\~sdbdac.tmp | ams\Accessories\Windows PowerShell, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\start menu\programs\adm | path = C:\Users\All Users\Microsoft\Windows\Start Menu\Progr | True | 1 | | | inistrative tools\~sdbdad.tmp | ams\Administrative Tools, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\start menu\programs\gam | path = C:\Users\All Users\Microsoft\Windows\Start Menu\Progr | True | 1 | | | es\~sdbdae.tmp | ams\Games, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\start menu\programs\jav | path = C:\Users\All Users\Microsoft\Windows\Start Menu\Progr | True | 1 | | | a\~sdbdbf.tmp | ams\Java, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\start menu\programs\mai | path = C:\Users\All Users\Microsoft\Windows\Start Menu\Progr | True | 1 | | | ntenance\~sdbdc0.tmp | ams\Maintenance, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\start menu\programs\sta | path = C:\Users\All Users\Microsoft\Windows\Start Menu\Progr | True | 1 | | | rtup\~sdbe3e.tmp | ams\Startup, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\start menu\programs\tab | path = C:\Users\All Users\Microsoft\Windows\Start Menu\Progr | True | 1 | | | let pc\~sdbe3f.tmp | ams\Tablet PC, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\templates\~sdbe4f.tmp | path = C:\Users\All Users\Microsoft\Windows\Templates, prefi | True | 1 | | | | x = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\wer\~sdbe50.tmp | path = C:\Users\All Users\Microsoft\Windows\WER, prefix = ~S | True | 1 | | | | D | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\wer\reportarchive\~sdbe | path = C:\Users\All Users\Microsoft\Windows\WER\ReportArchiv | True | 1 | | | 61.tmp | e, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\wer\reportarchive\noncr | path = C:\Users\All Users\Microsoft\Windows\WER\ReportArchiv | True | 1 | | | itical_x86_38e744f5ed92b6643d4610f93acebec71c7d44_03443294\~ | e\NonCritical_x86_38e744f5ed92b6643d4610f93acebec71c7d44_034 | | | | | sdbe62.tmp | 43294, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\wer\reportarchive\noncr | path = C:\Users\All Users\Microsoft\Windows\WER\ReportArchiv | True | 1 | | | itical_x86_5164e364f554d49c65173057b5da44f5956558a_03444874\ | e\NonCritical_x86_5164e364f554d49c65173057b5da44f5956558a_03 | | | | | ~sdbe63.tmp | 444874, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\wer\reportarchive\noncr | path = C:\Users\All Users\Microsoft\Windows\WER\ReportArchiv | True | 1 | | | itical_x86_7125ba86c55facb797ac343822852efc7fde5bb0_03681e87 | e\NonCritical_x86_7125ba86c55facb797ac343822852efc7fde5bb0_0 | | | | | \~sdbe64.tmp | 3681e87, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows\wer\reportqueue\~sdbe74 | path = C:\Users\All Users\Microsoft\Windows\WER\ReportQueue, | True | 1 | | | .tmp | prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\~sdbe85.tmp | path = C:\Users\All Users\Microsoft\Windows Defender, prefix | True | 1 | | | | = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\definition upd | path = C:\Users\All Users\Microsoft\Windows Defender\Definit | True | 1 | | | ates\~sdbe86.tmp | ion Updates, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\definition upd | path = C:\Users\All Users\Microsoft\Windows Defender\Definit | True | 1 | | | ates\backup\~sdbe97.tmp | ion Updates\Backup, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\definition upd | path = C:\Users\All Users\Microsoft\Windows Defender\Definit | True | 1 | | | ates\updates\~sdbe98.tmp | ion Updates\Updates, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\definition upd | path = C:\Users\All Users\Microsoft\Windows Defender\Definit | True | 1 | | | ates\{21833c5a-be0d-427d-b68e-efa18747b9cf}\~sdbeb8.tmp | ion Updates\{21833C5A-BE0D-427D-B68E-EFA18747B9CF}, prefix = | | | | | | ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\localcopy\~sdb | path = C:\Users\All Users\Microsoft\Windows Defender\LocalCo | True | 1 | | | eb9.tmp | py, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\quarantine\~sd | path = C:\Users\All Users\Microsoft\Windows Defender\Quarant | True | 1 | | | bec9.tmp | ine, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\scans\~sdbeca. | path = C:\Users\All Users\Microsoft\Windows Defender\Scans, | True | 1 | | | tmp | prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\scans\cleansto | path = C:\Users\All Users\Microsoft\Windows Defender\Scans\C | True | 1 | | | re\~sdbedb.tmp | leanStore, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\scans\cleansto | path = C:\Users\All Users\Microsoft\Windows Defender\Scans\C | True | 1 | | | re\entries\~sdbefb.tmp | leanStore\Entries, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\scans\cleansto | path = C:\Users\All Users\Microsoft\Windows Defender\Scans\C | True | 1 | | | re\resourcedata\~sdbefc.tmp | leanStore\ResourceData, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\scans\cleansto | path = C:\Users\All Users\Microsoft\Windows Defender\Scans\C | True | 1 | | | re\resources\~sdbf0d.tmp | leanStore\Resources, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\scans\history\ | path = C:\Users\All Users\Microsoft\Windows Defender\Scans\H | True | 1 | | | ~sdbf0e.tmp | istory, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\scans\history\ | path = C:\Users\All Users\Microsoft\Windows Defender\Scans\H | True | 1 | | | cachemanager\~sdbf0f.tmp | istory\CacheManager, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\scans\history\ | path = C:\Users\All Users\Microsoft\Windows Defender\Scans\H | True | 1 | | | results\~sdbf1f.tmp | istory\Results, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\scans\history\ | path = C:\Users\All Users\Microsoft\Windows Defender\Scans\H | True | 1 | | | results\resource\~sdbf20.tmp | istory\Results\Resource, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\scans\history\ | path = C:\Users\All Users\Microsoft\Windows Defender\Scans\H | True | 1 | | | service\~sdbf41.tmp | istory\Service, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\scans\history\ | path = C:\Users\All Users\Microsoft\Windows Defender\Scans\H | True | 1 | | | store\~sdbf42.tmp | istory\Store, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows defender\support\~sdbf4 | path = C:\Users\All Users\Microsoft\Windows Defender\Support | True | 1 | | | 3.tmp | , prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows nt\~sdbf53.tmp | path = C:\Users\All Users\Microsoft\Windows NT, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows nt\msfax\~sdbf64.tmp | path = C:\Users\All Users\Microsoft\Windows NT\MSFax, prefix | True | 1 | | | | = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows nt\msfax\activitylog\~s | path = C:\Users\All Users\Microsoft\Windows NT\MSFax\Activit | True | 1 | | | dbf65.tmp | yLog, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows nt\msfax\common coverpa | path = C:\Users\All Users\Microsoft\Windows NT\MSFax\Common | True | 1 | | | ges\~sdbf75.tmp | Coverpages, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows nt\msfax\common coverpa | path = C:\Users\All Users\Microsoft\Windows NT\MSFax\Common | True | 1 | | | ges\en-us\~sdbf86.tmp | Coverpages\en-US, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows nt\msfax\inbox\~sdbf87. | path = C:\Users\All Users\Microsoft\Windows NT\MSFax\Inbox, | True | 1 | | | tmp | prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows nt\msfax\queue\~sdbf88. | path = C:\Users\All Users\Microsoft\Windows NT\MSFax\Queue, | True | 1 | | | tmp | prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows nt\msfax\sentitems\~sdb | path = C:\Users\All Users\Microsoft\Windows NT\MSFax\SentIte | True | 1 | | | f99.tmp | ms, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\~ | path = C:\Users\All Users\Microsoft\Windows NT\MSFax\Virtual | True | 1 | | | sdbf9a.tmp | Inbox, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\e | path = C:\Users\All Users\Microsoft\Windows NT\MSFax\Virtual | True | 1 | | | n-us\~sdbf9b.tmp | Inbox\en-US, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\windows nt\msscan\~sdbfab.tmp | path = C:\Users\All Users\Microsoft\Windows NT\MSScan, prefi | True | 1 | | | | x = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\wwansvc\~sdc048.tmp | path = C:\Users\All Users\Microsoft\WwanSvc, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\microsoft\wwansvc\profiles\~sdc049.tmp | path = C:\Users\All Users\Microsoft\WwanSvc\Profiles, prefix | False | 1 | | | | = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\mozilla\~sdc0c7.tmp | path = C:\Users\All Users\Mozilla, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\mozilla\logs\~sdc0c8.tmp | path = C:\Users\All Users\Mozilla\logs, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\oracle\~sdc0d9.tmp | path = C:\Users\All Users\Oracle, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\oracle\java\~sdc0da.tmp | path = C:\Users\All Users\Oracle\Java, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\oracle\java\.oracle_jre_usage\~sdc0ea.tmp | path = C:\Users\All Users\Oracle\Java\.oracle_jre_usage, pre | True | 1 | | | | fix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\oracle\java\installcache\~sdc0eb.tmp | path = C:\Users\All Users\Oracle\Java\installcache, prefix = | True | 1 | | | | ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\oracle\java\javapath\~sdc0ec.tmp | path = C:\Users\All Users\Oracle\Java\javapath, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\~sdc0fd.tmp | path = C:\Users\All Users\Package Cache, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\d4036846864773e3d647f421dfe | path = C:\Users\All Users\Package Cache\D4036846864773E3D647 | True | 1 | | | 7f6ca536e307b\~sdc11d.tmp | F421DFE7F6CA536E307B, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\d4036846864773e3d647f421dfe | path = C:\Users\All Users\Package Cache\D4036846864773E3D647 | True | 1 | | | 7f6ca536e307b\packages\~sdc11e.tmp | F421DFE7F6CA536E307B\packages, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\d4036846864773e3d647f421dfe | path = C:\Users\All Users\Package Cache\D4036846864773E3D647 | True | 1 | | | 7f6ca536e307b\packages\patch\~sdc11f.tmp | F421DFE7F6CA536E307B\packages\Patch, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\d4036846864773e3d647f421dfe | path = C:\Users\All Users\Package Cache\D4036846864773E3D647 | True | 1 | | | 7f6ca536e307b\packages\patch\x86\~sdc13f.tmp | F421DFE7F6CA536E307B\packages\Patch\x86, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{13a4ee12-23ea-3371-91ee-ef | path = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371- | True | 1 | | | b36ddfff3e}v12.0.21005\~sdc140.tmp | 91EE-EFB36DDFFF3E}v12.0.21005, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{13a4ee12-23ea-3371-91ee-ef | path = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371- | True | 1 | | | b36ddfff3e}v12.0.21005\packages\~sdc151.tmp | 91EE-EFB36DDFFF3E}v12.0.21005\packages, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{13a4ee12-23ea-3371-91ee-ef | path = C:\Users\All Users\Package Cache\{13A4EE12-23EA-3371- | True | 1 | | | b36ddfff3e}v12.0.21005\packages\vcruntimeminimum_x86\~sdc152 | 91EE-EFB36DDFFF3E}v12.0.21005\packages\vcRuntimeMinimum_x86, | | | | | .tmp | prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{33d1fd90-4274-48a1-9bc1-97 | path = C:\Users\All Users\Package Cache\{33d1fd90-4274-48a1- | True | 1 | | | e33d9c2d6f}\~sdc153.tmp | 9bc1-97e33d9c2d6f}, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{74d0e5db-b326-4dae-a6b2-44 | path = C:\Users\All Users\Package Cache\{74d0e5db-b326-4dae- | True | 1 | | | 5b9de1836e}\~sdc154.tmp | a6b2-445b9de1836e}, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{a2563e55-3bec-3828-8d67-e5 | path = C:\Users\All Users\Package Cache\{A2563E55-3BEC-3828- | True | 1 | | | e8b9e8b675}v14.0.23026\~sdc164.tmp | 8D67-E5E8B9E8B675}v14.0.23026, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{a2563e55-3bec-3828-8d67-e5 | path = C:\Users\All Users\Package Cache\{A2563E55-3BEC-3828- | True | 1 | | | e8b9e8b675}v14.0.23026\packages\~sdc175.tmp | 8D67-E5E8B9E8B675}v14.0.23026\packages, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{a2563e55-3bec-3828-8d67-e5 | path = C:\Users\All Users\Package Cache\{A2563E55-3BEC-3828- | True | 1 | | | e8b9e8b675}v14.0.23026\packages\vcruntimeminimum_x86\~sdc176 | 8D67-E5E8B9E8B675}v14.0.23026\packages\vcRuntimeMinimum_x86, | | | | | .tmp | prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{b175520c-86a2-35a7-8619-86 | path = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7- | True | 1 | | | dc379688b9}v11.0.61030\~sdc177.tmp | 8619-86DC379688B9}v11.0.61030, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{b175520c-86a2-35a7-8619-86 | path = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7- | True | 1 | | | dc379688b9}v11.0.61030\packages\~sdc188.tmp | 8619-86DC379688B9}v11.0.61030\packages, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{b175520c-86a2-35a7-8619-86 | path = C:\Users\All Users\Package Cache\{B175520C-86A2-35A7- | True | 1 | | | dc379688b9}v11.0.61030\packages\vcruntimeadditional_x86\~sdc | 8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x | | | | | 189.tmp | 86, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{bd95a8cd-1d9f-35ad-981a-3e | path = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD- | True | 1 | | | 7925026ebb}v11.0.61030\~sdc18a.tmp | 981A-3E7925026EBB}v11.0.61030, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{bd95a8cd-1d9f-35ad-981a-3e | path = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD- | True | 1 | | | 7925026ebb}v11.0.61030\packages\~sdc18b.tmp | 981A-3E7925026EBB}v11.0.61030\packages, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{bd95a8cd-1d9f-35ad-981a-3e | path = C:\Users\All Users\Package Cache\{BD95A8CD-1D9F-35AD- | True | 1 | | | 7925026ebb}v11.0.61030\packages\vcruntimeminimum_x86\~sdc18c | 981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86, | | | | | .tmp | prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{be960c1c-7bad-3de6-8b1a-26 | path = C:\Users\All Users\Package Cache\{BE960C1C-7BAD-3DE6- | True | 1 | | | 16fe532845}v14.0.23026\~sdc19c.tmp | 8B1A-2616FE532845}v14.0.23026, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{be960c1c-7bad-3de6-8b1a-26 | path = C:\Users\All Users\Package Cache\{BE960C1C-7BAD-3DE6- | True | 1 | | | 16fe532845}v14.0.23026\packages\~sdc19d.tmp | 8B1A-2616FE532845}v14.0.23026\packages, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{be960c1c-7bad-3de6-8b1a-26 | path = C:\Users\All Users\Package Cache\{BE960C1C-7BAD-3DE6- | True | 1 | | | 16fe532845}v14.0.23026\packages\vcruntimeadditional_x86\~sdc | 8B1A-2616FE532845}v14.0.23026\packages\vcRuntimeAdditional_x | | | | | 19e.tmp | 86, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{e6e75766-da0f-4ba2-9788-6e | path = C:\Users\All Users\Package Cache\{e6e75766-da0f-4ba2- | True | 1 | | | a593ce702d}\~sdc1af.tmp | 9788-6ea593ce702d}, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{f8cfeb22-a2e7-3971-9eda-4b | path = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971- | True | 1 | | | 11edefc185}v12.0.21005\~sdc1b0.tmp | 9EDA-4B11EDEFC185}v12.0.21005, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{f8cfeb22-a2e7-3971-9eda-4b | path = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971- | True | 1 | | | 11edefc185}v12.0.21005\packages\~sdc1b1.tmp | 9EDA-4B11EDEFC185}v12.0.21005\packages, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\package cache\{f8cfeb22-a2e7-3971-9eda-4b | path = C:\Users\All Users\Package Cache\{F8CFEB22-A2E7-3971- | True | 1 | | | 11edefc185}v12.0.21005\packages\vcruntimeadditional_x86\~sdc | 9EDA-4B11EDEFC185}v12.0.21005\packages\vcRuntimeAdditional_x | | | | | 1c1.tmp | 86, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\qxtqusdnjzrizx418\~sdc1c2.tmp | path = C:\Users\All Users\qxtqusdnjzrizx418, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\all users\qxtqusdnjzrizx418\msg\~sdc1c3.tmp | path = C:\Users\All Users\qxtqusdnjzrizx418\msg, prefix = ~S | True | 1 | | | | D | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\~sdc1d4.tmp | path = C:\Users\Default, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\~sdc1f4.tmp | path = C:\Users\Default\AppData, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\~sdc1f5.tmp | path = C:\Users\Default\AppData\Local, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\~sdc206.tmp | path = C:\Users\Default\AppData\Local\Microsoft, prefix = ~S | True | 1 | | | | D | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\credentials\~sdc236 | path = C:\Users\Default\AppData\Local\Microsoft\Credentials, | True | 1 | | | .tmp | prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\feeds\~sdc237.tmp | path = C:\Users\Default\AppData\Local\Microsoft\Feeds, prefi | True | 1 | | | | x = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\feeds\microsoft fee | path = C:\Users\Default\AppData\Local\Microsoft\Feeds\Micros | True | 1 | | | ds~\~sdc247.tmp | oft Feeds~, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\feeds\{5588acfd-643 | path = C:\Users\Default\AppData\Local\Microsoft\Feeds\{5588A | True | 1 | | | 6-411b-a5ce-666ae6a92d3d}~\~sdc258.tmp | CFD-6436-411B-A5CE-666AE6A92D3D}~, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\feeds\{5588acfd-643 | path = C:\Users\Default\AppData\Local\Microsoft\Feeds\{5588A | True | 1 | | | 6-411b-a5ce-666ae6a92d3d}~\webslices~\~sdc259.tmp | CFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\feeds cache\~sdc25a | path = C:\Users\Default\AppData\Local\Microsoft\Feeds Cache, | True | 1 | | | .tmp | prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\feeds cache\4cssrv0 | path = C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\ | True | 1 | | | 0\~sdc26a.tmp | 4CSSRV00, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\feeds cache\dt1gie4 | path = C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\ | True | 1 | | | d\~sdc26b.tmp | DT1GIE4D, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\feeds cache\f6gei81 | path = C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\ | True | 1 | | | z\~sdc27c.tmp | F6GEI81Z, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\feeds cache\gxo2h2p | path = C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\ | True | 1 | | | j\~sdc27d.tmp | GXO2H2PJ, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\internet explorer\~ | path = C:\Users\Default\AppData\Local\Microsoft\Internet Exp | True | 1 | | | sdc27e.tmp | lorer, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\media player\~sdc29 | path = C:\Users\Default\AppData\Local\Microsoft\Media Player | True | 1 | | | e.tmp | , prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\media player\sync p | path = C:\Users\Default\AppData\Local\Microsoft\Media Player | True | 1 | | | laylists\~sdc29f.tmp | \Sync Playlists, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\media player\sync p | path = C:\Users\Default\AppData\Local\Microsoft\Media Player | True | 1 | | | laylists\en-us\~sdc2a0.tmp | \Sync Playlists\en-US, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\media player\sync p | path = C:\Users\Default\AppData\Local\Microsoft\Media Player | True | 1 | | | laylists\en-us\0000fdbe\~sdc2b1.tmp | \Sync Playlists\en-US\0000FDBE, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows\~sdc2c1.tmp | path = C:\Users\Default\AppData\Local\Microsoft\Windows, pre | True | 1 | | | | fix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows\burn\~sdc2d | path = C:\Users\Default\AppData\Local\Microsoft\Windows\Burn | True | 1 | | | 2.tmp | , prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows\burn\burn\~ | path = C:\Users\Default\AppData\Local\Microsoft\Windows\Burn | True | 1 | | | sdc2d3.tmp | \Burn, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows\caches\~sdc | path = C:\Users\Default\AppData\Local\Microsoft\Windows\Cach | True | 1 | | | 2d4.tmp | es, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows\explorer\~s | path = C:\Users\Default\AppData\Local\Microsoft\Windows\Expl | True | 1 | | | dc2d5.tmp | orer, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows\gameexplore | path = C:\Users\Default\AppData\Local\Microsoft\Windows\Game | True | 1 | | | r\~sdc2e6.tmp | Explorer, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows\history\~sd | path = C:\Users\Default\AppData\Local\Microsoft\Windows\Hist | True | 1 | | | c2e7.tmp | ory, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows\history\his | path = C:\Users\Default\AppData\Local\Microsoft\Windows\Hist | True | 1 | | | tory.ie5\~sdc2f7.tmp | ory\History.IE5, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows\history\low | path = C:\Users\Default\AppData\Local\Microsoft\Windows\Hist | True | 1 | | | \~sdc2f8.tmp | ory\Low, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows\ringtones\~ | path = C:\Users\Default\AppData\Local\Microsoft\Windows\Ring | True | 1 | | | sdc2f9.tmp | tones, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows\wer\~sdc30a | path = C:\Users\Default\AppData\Local\Microsoft\Windows\WER, | True | 1 | | | .tmp | prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows\wer\erc\~sd | path = C:\Users\Default\AppData\Local\Microsoft\Windows\WER\ | True | 1 | | | c30b.tmp | ERC, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows\wer\reporta | path = C:\Users\Default\AppData\Local\Microsoft\Windows\WER\ | True | 1 | | | rchive\~sdc30c.tmp | ReportArchive, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows mail\~sdc31 | path = C:\Users\Default\AppData\Local\Microsoft\Windows Mail | True | 1 | | | c.tmp | , prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows mail\backup | path = C:\Users\Default\AppData\Local\Microsoft\Windows Mail | True | 1 | | | \~sdc31d.tmp | \Backup, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows mail\backup | path = C:\Users\Default\AppData\Local\Microsoft\Windows Mail | True | 1 | | | \new\~sdc32e.tmp | \Backup\new, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows mail\statio | path = C:\Users\Default\AppData\Local\Microsoft\Windows Mail | True | 1 | | | nery\~sdc33f.tmp | \Stationery, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows media\~sdc3 | path = C:\Users\Default\AppData\Local\Microsoft\Windows Medi | True | 1 | | | bc.tmp | a, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows media\12.0\ | path = C:\Users\Default\AppData\Local\Microsoft\Windows Medi | True | 1 | | | ~sdc3ec.tmp | a\12.0, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows sidebar\~sd | path = C:\Users\Default\AppData\Local\Microsoft\Windows Side | True | 1 | | | c3ed.tmp | bar, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\local\microsoft\windows sidebar\gad | path = C:\Users\Default\AppData\Local\Microsoft\Windows Side | True | 1 | | | gets\~sdc3ee.tmp | bar\Gadgets, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\locallow\~sdc3ef.tmp | path = C:\Users\Default\AppData\LocalLow, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\~sdc40f.tmp | path = C:\Users\Default\AppData\Roaming, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\identities\~sdc410.tmp | path = C:\Users\Default\AppData\Roaming\Identities, prefix = | True | 1 | | | | ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\identities\{b85dca4a-5c21-4 | path = C:\Users\Default\AppData\Roaming\Identities\{B85DCA4A | True | 1 | | | ec5-af48-a2a88cd3d1d9}\~sdc411.tmp | -5C21-4EC5-AF48-A2A88CD3D1D9}, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\~sdc422.tmp | path = C:\Users\Default\AppData\Roaming\Microsoft, prefix = | True | 1 | | | | ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\credentials\~sdc4 | path = C:\Users\Default\AppData\Roaming\Microsoft\Credential | True | 1 | | | 23.tmp | s, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\crypto\~sdc434.tm | path = C:\Users\Default\AppData\Roaming\Microsoft\Crypto, pr | True | 1 | | | p | efix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\crypto\rsa\~sdc44 | path = C:\Users\Default\AppData\Roaming\Microsoft\Crypto\RSA | True | 1 | | | 4.tmp | , prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\internet explorer | path = C:\Users\Default\AppData\Roaming\Microsoft\Internet E | True | 1 | | | \~sdc445.tmp | xplorer, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\internet explorer | path = C:\Users\Default\AppData\Roaming\Microsoft\Internet E | True | 1 | | | \quick launch\~sdc456.tmp | xplorer\Quick Launch, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\internet explorer | path = C:\Users\Default\AppData\Roaming\Microsoft\Internet E | True | 1 | | | \quick launch\user pinned\~sdc457.tmp | xplorer\Quick Launch\User Pinned, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\internet explorer | path = C:\Users\Default\AppData\Roaming\Microsoft\Internet E | True | 1 | | | \quick launch\user pinned\implicitappshortcuts\~sdc467.tmp | xplorer\Quick Launch\User Pinned\ImplicitAppShortcuts, prefi | | | | | | x = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\internet explorer | path = C:\Users\Default\AppData\Roaming\Microsoft\Internet E | True | 1 | | | \quick launch\user pinned\taskbar\~sdc478.tmp | xplorer\Quick Launch\User Pinned\TaskBar, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\protect\~sdc489.t | path = C:\Users\Default\AppData\Roaming\Microsoft\Protect, p | True | 1 | | | mp | refix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\protect\s-1-5-21- | path = C:\Users\Default\AppData\Roaming\Microsoft\Protect\S- | True | 1 | | | 892523515-1518344882-2423736544-500\~sdc48a.tmp | 1-5-21-892523515-1518344882-2423736544-500, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\systemcertificate | path = C:\Users\Default\AppData\Roaming\Microsoft\SystemCert | True | 1 | | | s\~sdc49a.tmp | ificates, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\systemcertificate | path = C:\Users\Default\AppData\Roaming\Microsoft\SystemCert | True | 1 | | | s\my\~sdc49b.tmp | ificates\My, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\systemcertificate | path = C:\Users\Default\AppData\Roaming\Microsoft\SystemCert | True | 1 | | | s\my\certificates\~sdc4ac.tmp | ificates\My\Certificates, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\systemcertificate | path = C:\Users\Default\AppData\Roaming\Microsoft\SystemCert | True | 1 | | | s\my\crls\~sdc4ad.tmp | ificates\My\CRLs, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\systemcertificate | path = C:\Users\Default\AppData\Roaming\Microsoft\SystemCert | True | 1 | | | s\my\ctls\~sdc4ae.tmp | ificates\My\CTLs, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\~sdc4be.t | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows, p | True | 1 | | | mp | refix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\cookies\~ | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\Co | True | 1 | | | sdc4cf.tmp | okies, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\iecompatc | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\IE | True | 1 | | | ache\~sdc4d0.tmp | CompatCache, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\iecompatc | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\IE | True | 1 | | | ache\low\~sdc4e1.tmp | CompatCache\Low, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\ietldcach | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\IE | True | 1 | | | e\~sdc4e2.tmp | TldCache, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\ietldcach | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\IE | True | 1 | | | e\low\~sdc4e3.tmp | TldCache\Low, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\libraries | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\Li | True | 1 | | | \~sdc4e4.tmp | braries, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\network s | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\Ne | True | 1 | | | hortcuts\~sdc4f4.tmp | twork Shortcuts, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\printer s | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\Pr | True | 1 | | | hortcuts\~sdc4f5.tmp | inter Shortcuts, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\privacie\ | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\Pr | True | 1 | | | ~sdc4f6.tmp | ivacIE, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\privacie\ | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\Pr | True | 1 | | | low\~sdc507.tmp | ivacIE\Low, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\recent\~s | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\Re | True | 1 | | | dc508.tmp | cent, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\recent\au | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\Re | True | 1 | | | tomaticdestinations\~sdc509.tmp | cent\AutomaticDestinations, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\recent\cu | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\Re | True | 1 | | | stomdestinations\~sdc50a.tmp | cent\CustomDestinations, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\sendto\~s | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\Se | True | 1 | | | dc51a.tmp | ndTo, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\start men | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\St | True | 1 | | | u\~sdc51b.tmp | art Menu, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\start men | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\St | True | 1 | | | u\programs\~sdc52c.tmp | art Menu\Programs, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\start men | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\St | True | 1 | | | u\programs\accessories\~sdc53d.tmp | art Menu\Programs\Accessories, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\start men | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\St | True | 1 | | | u\programs\accessories\accessibility\~sdc53e.tmp | art Menu\Programs\Accessories\Accessibility, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\start men | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\St | True | 1 | | | u\programs\accessories\system tools\~sdc54e.tmp | art Menu\Programs\Accessories\System Tools, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\start men | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\St | True | 1 | | | u\programs\administrative tools\~sdc55f.tmp | art Menu\Programs\Administrative Tools, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\start men | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\St | True | 1 | | | u\programs\maintenance\~sdc560.tmp | art Menu\Programs\Maintenance, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\start men | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\St | True | 1 | | | u\programs\startup\~sdc561.tmp | art Menu\Programs\Startup, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\templates | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\Te | True | 1 | | | \~sdc562.tmp | mplates, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\appdata\roaming\microsoft\windows\themes\~s | path = C:\Users\Default\AppData\Roaming\Microsoft\Windows\Th | True | 1 | | | dc563.tmp | emes, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\contacts\~sdc5e1.tmp | path = C:\Users\Default\Contacts, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\desktop\~sdc5f1.tmp | path = C:\Users\Default\Desktop, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\documents\~sdc5f2.tmp | path = C:\Users\Default\Documents, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\downloads\~sdc612.tmp | path = C:\Users\Default\Downloads, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\favorites\~sdc623.tmp | path = C:\Users\Default\Favorites, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\favorites\links\~sdc643.tmp | path = C:\Users\Default\Favorites\Links, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\favorites\microsoft websites\~sdc654.tmp | path = C:\Users\Default\Favorites\Microsoft Websites, prefix | True | 1 | | | | = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\favorites\msn websites\~sdc664.tmp | path = C:\Users\Default\Favorites\MSN Websites, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\favorites\windows live\~sdc740.tmp | path = C:\Users\Default\Favorites\Windows Live, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\links\~sdc760.tmp | path = C:\Users\Default\Links, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\music\~sdc790.tmp | path = C:\Users\Default\Music, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\pictures\~sdc791.tmp | path = C:\Users\Default\Pictures, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\saved games\~sdc7a1.tmp | path = C:\Users\Default\Saved Games, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\searches\~sdc7a2.tmp | path = C:\Users\Default\Searches, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\default\videos\~sdc7b3.tmp | path = C:\Users\Default\Videos, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\~sdc7b4.tmp | path = C:\Users\DSsDPMx042, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\~sdc7e4.tmp | path = C:\Users\DSsDPMx042\AppData, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\~sdc7f4.tmp | path = C:\Users\DSsDPMx042\AppData\Local, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\google\~sdc815.tmp | path = C:\Users\DSsDPMx042\AppData\Local\Google, prefix = ~S | True | 1 | | | | D | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\google\crashreports\~sdc81 | path = C:\Users\DSsDPMx042\AppData\Local\Google\CrashReports | True | 1 | | | 6.tmp | , prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\~sdc817.tmp | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft, prefix = | True | 1 | | | | ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\credentials\~sdc | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Credentia | True | 1 | | | 827.tmp | ls, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\event viewer\~sd | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Event Vie | True | 1 | | | c838.tmp | wer, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\feeds\~sdc839.tm | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds, pr | True | 1 | | | p | efix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\feeds\microsoft | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds\Mic | True | 1 | | | feeds~\~sdc849.tmp | rosoft Feeds~, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\feeds\{5588acfd- | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds\{55 | True | 1 | | | 6436-411b-a5ce-666ae6a92d3d}~\~sdc85a.tmp | 88ACFD-6436-411B-A5CE-666AE6A92D3D}~, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\feeds\{5588acfd- | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds\{55 | True | 1 | | | 6436-411b-a5ce-666ae6a92d3d}~\webslices~\~sdc86b.tmp | 88ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~, prefix = ~S | | | | | | D | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\feeds cache\~sdc | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds Cac | True | 1 | | | 86c.tmp | he, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\feeds cache\4css | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds Cac | True | 1 | | | rv00\~sdc87c.tmp | he\4CSSRV00, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\feeds cache\dt1g | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds Cac | True | 1 | | | ie4d\~sdc87d.tmp | he\DT1GIE4D, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\feeds cache\f6ge | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds Cac | True | 1 | | | i81z\~sdc87e.tmp | he\F6GEI81Z, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\feeds cache\gxo2 | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Feeds Cac | True | 1 | | | h2pj\~sdc87f.tmp | he\GXO2H2PJ, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Internet | True | 1 | | | r\~sdc890.tmp | Explorer, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Internet | True | 1 | | | r\recovery\~sdc8a0.tmp | Explorer\Recovery, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Internet | True | 1 | | | r\recovery\active\~sdc8b1.tmp | Explorer\Recovery\Active, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Internet | True | 1 | | | r\recovery\last active\~sdc93e.tmp | Explorer\Recovery\Last Active, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\media player\~sd | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Media Pla | True | 1 | | | c94f.tmp | yer, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\media player\syn | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Media Pla | True | 1 | | | c playlists\~sdc950.tmp | yer\Sync Playlists, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\media player\syn | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Media Pla | True | 1 | | | c playlists\en-us\~sdc961.tmp | yer\Sync Playlists\en-US, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\media player\syn | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Media Pla | True | 1 | | | c playlists\en-us\0000cd9a\~sdc962.tmp | yer\Sync Playlists\en-US\0000CD9A, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\media player\syn | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Media Pla | True | 1 | | | c playlists\en-us\0000fdbe\~sdc972.tmp | yer\Sync Playlists\en-US\0000FDBE, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\taskschedulercon | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\TaskSched | True | 1 | | | fig\~sdc983.tmp | ulerConfig, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\~sdc984. | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows, | True | 1 | | | tmp | prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\1033\~sd | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\1 | True | 1 | | | c994.tmp | 033, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\burn\~sd | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\B | True | 1 | | | c995.tmp | urn, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\burn\bur | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\B | True | 1 | | | n\~sdc996.tmp | urn\Burn, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\burn\bur | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\B | True | 1 | | | n1\~sdc9a7.tmp | urn\Burn1, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\~ | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\C | True | 1 | | | sdc9a8.tmp | aches, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\E | True | 1 | | | \~sdc9a9.tmp | xplorer, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\gameexpl | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\G | True | 1 | | | orer\~sdc9ba.tmp | ameExplorer, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\H | True | 1 | | | ~sdc9bb.tmp | istory, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\H | True | 1 | | | history.ie5\~sdc9cb.tmp | istory\History.IE5, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\H | True | 1 | | | history.ie5\mshist012017051520170516\~sdc9cc.tmp | istory\History.IE5\MSHist012017051520170516, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\H | True | 1 | | | low\~sdc9cd.tmp | istory\Low, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\H | True | 1 | | | low\history.ie5\~sdc9de.tmp | istory\Low\History.IE5, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\history\ | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\H | True | 1 | | | low\history.ie5\mshist012016110220161103\~sdc9ee.tmp | istory\Low\History.IE5\MSHist012016110220161103, prefix = ~S | | | | | | D | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\ringtone | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\R | True | 1 | | | s\~sdc9ef.tmp | ingtones, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\themes\~ | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\T | True | 1 | | | sdc9f0.tmp | hemes, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\wer\~sdc | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\W | True | 1 | | | a01.tmp | ER, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\wer\erc\ | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\W | True | 1 | | | ~sdca02.tmp | ER\ERC, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\wer\repo | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\W | True | 1 | | | rtarchive\~sdca03.tmp | ER\ReportArchive, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows\wer\repo | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows\W | True | 1 | | | rtqueue\~sdca14.tmp | ER\ReportQueue, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\~sd | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows M | True | 1 | | | ca15.tmp | ail, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\bac | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows M | True | 1 | | | kup\~sdca25.tmp | ail\Backup, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\bac | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows M | True | 1 | | | kup\new\~sdca26.tmp | ail\Backup\new, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows M | True | 1 | | | tionery\~sdca27.tmp | ail\Stationery, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows media\~s | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows M | True | 1 | | | dcb22.tmp | edia, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows media\12 | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows M | True | 1 | | | .0\~sdcb23.tmp | edia\12.0, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows sidebar\ | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows S | True | 1 | | | ~sdcb24.tmp | idebar, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\microsoft\windows sidebar\ | path = C:\Users\DSsDPMx042\AppData\Local\Microsoft\Windows S | True | 1 | | | gadgets\~sdcb34.tmp | idebar\Gadgets, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\local\virtualstore\~sdcb35.tmp | path = C:\Users\DSsDPMx042\AppData\Local\VirtualStore, prefi | True | 1 | | | | x = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\~sdcb36.tmp | path = C:\Users\DSsDPMx042\AppData\LocalLow, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\microsoft\~sdcb47.tmp | path = C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft, prefi | True | 1 | | | | x = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\microsoft\cryptneturlca | path = C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\Cryptn | True | 1 | | | che\~sdcb48.tmp | etUrlCache, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\microsoft\cryptneturlca | path = C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\Cryptn | True | 1 | | | che\content\~sdcb49.tmp | etUrlCache\Content, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\microsoft\cryptneturlca | path = C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\Cryptn | True | 1 | | | che\metadata\~sdcb69.tmp | etUrlCache\MetaData, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | path = C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\Intern | True | 1 | | | orer\~sdcb7a.tmp | et Explorer, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | path = C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\Intern | True | 1 | | | orer\domstore\~sdcb8a.tmp | et Explorer\DOMStore, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | path = C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\Intern | True | 1 | | | orer\domstore\1ppol5zc\~sdcbab.tmp | et Explorer\DOMStore\1PPOL5ZC, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | path = C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\Intern | True | 1 | | | orer\domstore\68u8ihrk\~sdcbac.tmp | et Explorer\DOMStore\68U8IHRK, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | path = C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\Intern | True | 1 | | | orer\domstore\b10w93nd\~sdcbad.tmp | et Explorer\DOMStore\B10W93ND, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | path = C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\Intern | True | 1 | | | orer\domstore\ls3151yd\~sdcbae.tmp | et Explorer\DOMStore\LS3151YD, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\microsoft\internet expl | path = C:\Users\DSsDPMx042\AppData\LocalLow\Microsoft\Intern | True | 1 | | | orer\services\~sdcbaf.tmp | et Explorer\Services, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\~sdcbbf.tmp | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun, prefix = ~S | True | 1 | | | | D | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\~sdcbc0.tmp | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java, prefix | True | 1 | | | | = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\~sd | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | cbd1.tmp | ent, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\~sdcbe1.tmp | ent\cache, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\~sdcbf2.tmp | ent\cache\6.0, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\0\~sdcc70.tmp | ent\cache\6.0\0, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\1\~sdcc80.tmp | ent\cache\6.0\1, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\10\~sdcc91.tmp | ent\cache\6.0\10, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\11\~sdcc92.tmp | ent\cache\6.0\11, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\12\~sdcc93.tmp | ent\cache\6.0\12, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\13\~sdcca4.tmp | ent\cache\6.0\13, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\14\~sdcca5.tmp | ent\cache\6.0\14, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\15\~sdcca6.tmp | ent\cache\6.0\15, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\16\~sdcca7.tmp | ent\cache\6.0\16, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\17\~sdccb7.tmp | ent\cache\6.0\17, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\18\~sdccb8.tmp | ent\cache\6.0\18, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\19\~sdccb9.tmp | ent\cache\6.0\19, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\2\~sdccca.tmp | ent\cache\6.0\2, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\20\~sdccda.tmp | ent\cache\6.0\20, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\21\~sdcceb.tmp | ent\cache\6.0\21, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\22\~sdcd0b.tmp | ent\cache\6.0\22, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\23\~sdcd0c.tmp | ent\cache\6.0\23, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\24\~sdcd1d.tmp | ent\cache\6.0\24, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\25\~sdcd1e.tmp | ent\cache\6.0\25, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\26\~sdcd1f.tmp | ent\cache\6.0\26, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\27\~sdcd20.tmp | ent\cache\6.0\27, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\28\~sdcd30.tmp | ent\cache\6.0\28, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\29\~sdcd31.tmp | ent\cache\6.0\29, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\3\~sdcd42.tmp | ent\cache\6.0\3, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\30\~sdcd43.tmp | ent\cache\6.0\30, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\31\~sdcd54.tmp | ent\cache\6.0\31, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\32\~sdcd55.tmp | ent\cache\6.0\32, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\33\~sdcd56.tmp | ent\cache\6.0\33, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\34\~sdcd66.tmp | ent\cache\6.0\34, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\35\~sdcd67.tmp | ent\cache\6.0\35, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\36\~sdcd68.tmp | ent\cache\6.0\36, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\37\~sdcd69.tmp | ent\cache\6.0\37, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\38\~sdcd6a.tmp | ent\cache\6.0\38, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\39\~sdcd7b.tmp | ent\cache\6.0\39, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\4\~sdcd7c.tmp | ent\cache\6.0\4, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\40\~sdcd8c.tmp | ent\cache\6.0\40, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\41\~sdcd8d.tmp | ent\cache\6.0\41, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\42\~sdcd8e.tmp | ent\cache\6.0\42, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\43\~sdcd9f.tmp | ent\cache\6.0\43, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\44\~sdcda0.tmp | ent\cache\6.0\44, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\45\~sdcda1.tmp | ent\cache\6.0\45, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\46\~sdcda2.tmp | ent\cache\6.0\46, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\47\~sdcda3.tmp | ent\cache\6.0\47, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\48\~sdcdb4.tmp | ent\cache\6.0\48, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\49\~sdcdb5.tmp | ent\cache\6.0\49, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\5\~sdcdb6.tmp | ent\cache\6.0\5, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\50\~sdcdb7.tmp | ent\cache\6.0\50, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\51\~sdcdb8.tmp | ent\cache\6.0\51, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\52\~sdcdc8.tmp | ent\cache\6.0\52, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\53\~sdcdc9.tmp | ent\cache\6.0\53, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\54\~sdcdca.tmp | ent\cache\6.0\54, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\55\~sdcddb.tmp | ent\cache\6.0\55, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\56\~sdcddc.tmp | ent\cache\6.0\56, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\57\~sdcddd.tmp | ent\cache\6.0\57, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\58\~sdcdde.tmp | ent\cache\6.0\58, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\59\~sdcddf.tmp | ent\cache\6.0\59, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\6\~sdcdef.tmp | ent\cache\6.0\6, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\60\~sdce00.tmp | ent\cache\6.0\60, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\61\~sdce01.tmp | ent\cache\6.0\61, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\62\~sdce02.tmp | ent\cache\6.0\62, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\63\~sdce03.tmp | ent\cache\6.0\63, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\7\~sdce23.tmp | ent\cache\6.0\7, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\8\~sdce24.tmp | ent\cache\6.0\8, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\9\~sdce25.tmp | ent\cache\6.0\9, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\host\~sdce36.tmp | ent\cache\6.0\host, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\muffin\~sdce37.tmp | ent\cache\6.0\muffin, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\6.0\tmp\~sdce38.tmp | ent\cache\6.0\tmp, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\cac | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | he\security\~sdce39.tmp | ent\cache\security, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\ext | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | \~sdce3a.tmp | ent\ext, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\log | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | \~sdce3b.tmp | ent\log, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\sec | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | urity\~sdce4b.tmp | ent\security, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\tmp | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | \~sdce4c.tmp | ent\tmp, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\locallow\sun\java\deployment\tmp | path = C:\Users\DSsDPMx042\AppData\LocalLow\Sun\Java\Deploym | True | 1 | | | \si\~sdce4d.tmp | ent\tmp\si, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\~sdce4e.tmp | path = C:\Users\DSsDPMx042\AppData\Roaming, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\identities\~sdcf59.tmp | path = C:\Users\DSsDPMx042\AppData\Roaming\Identities, prefi | True | 1 | | | | x = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\identities\{b85dca4a-5c2 | path = C:\Users\DSsDPMx042\AppData\Roaming\Identities\{B85DC | True | 1 | | | 1-4ec5-af48-a2a88cd3d1d9}\~sdcf5a.tmp | A4A-5C21-4EC5-AF48-A2A88CD3D1D9}, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\~sdcf6a.tmp | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft, prefix | True | 1 | | | | = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\credentials\~s | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Credent | True | 1 | | | dcf6b.tmp | ials, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\crypto\~sdcf7c | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Crypto, | True | 1 | | | .tmp | prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\crypto\rsa\~sd | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Crypto\ | True | 1 | | | cf7d.tmp | RSA, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\crypto\rsa\s-1 | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Crypto\ | True | 1 | | | -5-21-3385616887-338319549-3229196192-1000\~sdcf8d.tmp | RSA\S-1-5-21-3385616887-338319549-3229196192-1000, prefix = | | | | | | ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\internet explo | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Interne | True | 1 | | | rer\~sdcf8e.tmp | t Explorer, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\internet explo | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Interne | True | 1 | | | rer\quick launch\~sdcf8f.tmp | t Explorer\Quick Launch, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\internet explo | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Interne | True | 1 | | | rer\quick launch\user pinned\~sdcfa0.tmp | t Explorer\Quick Launch\User Pinned, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\internet explo | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Interne | True | 1 | | | rer\quick launch\user pinned\implicitappshortcuts\~sdcfb1.tm | t Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts, pr | | | | | p | efix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\internet explo | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Interne | True | 1 | | | rer\quick launch\user pinned\taskbar\~sdcfb2.tmp | t Explorer\Quick Launch\User Pinned\TaskBar, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\mmc\~sdcfc2.tm | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\MMC, pr | True | 1 | | | p | efix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\network\~sdcfd | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Network | True | 1 | | | 3.tmp | , prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\network\connec | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Network | True | 1 | | | tions\~sdcfd4.tmp | \Connections, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\network\connec | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Network | True | 1 | | | tions\pbk\~sdcfd5.tmp | \Connections\Pbk, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\network\connec | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Network | True | 1 | | | tions\pbk\_hiddenpbk\~sdcfd6.tmp | \Connections\Pbk\_hiddenPbk, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\protect\~sdcfe | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Protect | True | 1 | | | 6.tmp | , prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\protect\s-1-5- | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Protect | True | 1 | | | 21-3385616887-338319549-3229196192-1000\~sdcfe7.tmp | \S-1-5-21-3385616887-338319549-3229196192-1000, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\protect\s-1-5- | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Protect | True | 1 | | | 21-892523515-1518344882-2423736544-500\~sdcff8.tmp | \S-1-5-21-892523515-1518344882-2423736544-500, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\systemcertific | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\SystemC | True | 1 | | | ates\~sdcff9.tmp | ertificates, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\systemcertific | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\SystemC | True | 1 | | | ates\my\~sdcffa.tmp | ertificates\My, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\systemcertific | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\SystemC | True | 1 | | | ates\my\certificates\~sdd087.tmp | ertificates\My\Certificates, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\systemcertific | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\SystemC | True | 1 | | | ates\my\crls\~sdd088.tmp | ertificates\My\CRLs, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\systemcertific | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\SystemC | True | 1 | | | ates\my\ctls\~sdd0e7.tmp | ertificates\My\CTLs, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\~sdd0e | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | 8.tmp | , prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | s\~sdd166.tmp | \Cookies, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | s\low\~sdd176.tmp | \Cookies\Low, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\iecomp | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | atcache\~sdd177.tmp | \IECompatCache, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\iecomp | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | atcache\low\~sdd178.tmp | \IECompatCache\Low, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\ietldc | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | ache\~sdd189.tmp | \IETldCache, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\ietldc | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | ache\low\~sdd18a.tmp | \IETldCache\Low, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\librar | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | ies\~sdd18b.tmp | \Libraries, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\networ | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | k shortcuts\~sdd19c.tmp | \Network Shortcuts, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\printe | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | r shortcuts\~sdd1ac.tmp | \Printer Shortcuts, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\privac | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | ie\~sdd1ad.tmp | \PrivacIE, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\privac | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | ie\low\~sdd1be.tmp | \PrivacIE\Low, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\recent | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | \~sdd1bf.tmp | \Recent, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\recent | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | \automaticdestinations\~sdd25c.tmp | \Recent\AutomaticDestinations, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\recent | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | \customdestinations\~sdd26c.tmp | \Recent\CustomDestinations, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\sendto | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | \~sdd26d.tmp | \SendTo, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | menu\~sdd26e.tmp | \Start Menu, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | menu\programs\~sdd27f.tmp | \Start Menu\Programs, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | menu\programs\accessories\~sdd290.tmp | \Start Menu\Programs\Accessories, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | menu\programs\accessories\accessibility\~sdd2a0.tmp | \Start Menu\Programs\Accessories\Accessibility, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | menu\programs\accessories\system tools\~sdd2a1.tmp | \Start Menu\Programs\Accessories\System Tools, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | menu\programs\administrative tools\~sdd2a2.tmp | \Start Menu\Programs\Administrative Tools, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | menu\programs\maintenance\~sdd2a3.tmp | \Start Menu\Programs\Maintenance, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\start | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | menu\programs\startup\~sdd2c3.tmp | \Start Menu\Programs\Startup, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\templa | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | tes\~sdd2c4.tmp | \Templates, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\themes | path = C:\Users\DSsDPMx042\AppData\Roaming\Microsoft\Windows | True | 1 | | | \~sdd2c5.tmp | \Themes, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\sun\~sdd334.tmp | path = C:\Users\DSsDPMx042\AppData\Roaming\Sun, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\sun\java\~sdd344.tmp | path = C:\Users\DSsDPMx042\AppData\Roaming\Sun\Java, prefix | True | 1 | | | | = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\appdata\roaming\sun\java\deployment\~sdd | path = C:\Users\DSsDPMx042\AppData\Roaming\Sun\Java\Deployme | True | 1 | | | 355.tmp | nt, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\contacts\~sdd356.tmp | path = C:\Users\DSsDPMx042\Contacts, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\desktop\~sdd357.tmp | path = C:\Users\DSsDPMx042\Desktop, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\~sdd396.tmp | path = C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX, pre | True | 1 | | | | fix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\~sdd | path = C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\0qdv | True | 1 | | | 3a7.tmp | mG, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | path = C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\k8vA | True | 1 | | | \~sdd3b7.tmp | hpvastg, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | path = C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXS | True | 1 | | | ysj1\~sdd3c8.tmp | fGzRgx3ySj1, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | path = C:\Users\DSsDPMx042\Desktop\PGm8zH2aBxrDYC7AGszX\LsXS | True | 1 | | | ysj1\2tpofaj-rucn\~sdd3d9.tmp | fGzRgx3ySj1\2TpOfAj-RuCN, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\documents\~sdd3f9.tmp | path = C:\Users\DSsDPMx042\Documents, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\documents\z-zdwb\~sdd438.tmp | path = C:\Users\DSsDPMx042\Documents\Z-ZDWB, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\~sdd44 | path = C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC | True | 1 | | | 9.tmp | , prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | path = C:\Users\DSsDPMx042\Documents\Z-ZDWB\J9gD3zhD03fZBccC | True | 1 | | | ~sdd459.tmp | \3e4HO, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\~sd | path = C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1S | True | 1 | | | d46a.tmp | rgU, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | path = C:\Users\DSsDPMx042\Documents\Z-ZDWB\Kfd49GEf82K2WC1S | True | 1 | | | c-nspy xfvlw3\~sdd47b.tmp | rgU\TEDc-NsPy XFVlW3, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\downloads\~sdd47c.tmp | path = C:\Users\DSsDPMx042\Downloads, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\favorites\~sdd48c.tmp | path = C:\Users\DSsDPMx042\Favorites, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\favorites\links\~sdd49d.tmp | path = C:\Users\DSsDPMx042\Favorites\Links, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\favorites\microsoft websites\~sdd49e.tmp | path = C:\Users\DSsDPMx042\Favorites\Microsoft Websites, pre | True | 1 | | | | fix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\favorites\msn websites\~sdd4ae.tmp | path = C:\Users\DSsDPMx042\Favorites\MSN Websites, prefix = | True | 1 | | | | ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\favorites\windows live\~sdd4af.tmp | path = C:\Users\DSsDPMx042\Favorites\Windows Live, prefix = | True | 1 | | | | ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\links\~sdd4c0.tmp | path = C:\Users\DSsDPMx042\Links, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\music\~sdd4d1.tmp | path = C:\Users\DSsDPMx042\Music, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\music\ipzul2xxs j\~sdd4f1.tmp | path = C:\Users\DSsDPMx042\Music\IpzUl2xxs J, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\~sdd511.tmp | path = C:\Users\DSsDPMx042\Music\IpzUl2xxs J\fqNE, prefix = | True | 1 | | | | ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\~sdd522.tmp | path = C:\Users\DSsDPMx042\Music\IpzUl2xxs J\gzfr8pq, prefix | True | 1 | | | | = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\~sdd59f.tmp | path = C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj, prefix = | True | 1 | | | | ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\0-sd9l8u\~sdd5b0. | path = C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\0-sD9L8U, | True | 1 | | | tmp | prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\r4lsao\~sdd5c1.tm | path = C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\r4lSao, pr | True | 1 | | | p | efix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\~sdd | path = C:\Users\DSsDPMx042\Music\IpzUl2xxs J\hiWj\ZHuw0MA_qH | True | 1 | | | 5c2.tmp | Qt, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\pictures\~sdd5c3.tmp | path = C:\Users\DSsDPMx042\Pictures, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\pictures\j5lndpj\~sdd612.tmp | path = C:\Users\DSsDPMx042\Pictures\J5LNdpj, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\~sdd651.tmp | path = C:\Users\DSsDPMx042\Pictures\Jd8VsRICzqxDx9VoB, prefi | True | 1 | | | | x = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\pictures\qrgufb3m\~sdd681.tmp | path = C:\Users\DSsDPMx042\Pictures\QrgUfb3M, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\~sdd6a1.tmp | path = C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA, prefix | True | 1 | | | | = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\~sdd | path = C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\BhbsuWY | True | 1 | | | 6b2.tmp | vu, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | path = C:\Users\DSsDPMx042\Pictures\QrgUfb3M\3YHHEMA\g7Vbdhs | True | 1 | | | \~sdd6d2.tmp | AvPJRP7, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\pictures\_2hzdo\~sdd79e.tmp | path = C:\Users\DSsDPMx042\Pictures\_2HZDo, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\saved games\~sdd7cd.tmp | path = C:\Users\DSsDPMx042\Saved Games, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\searches\~sdd7ce.tmp | path = C:\Users\DSsDPMx042\Searches, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\videos\~sdd7df.tmp | path = C:\Users\DSsDPMx042\Videos, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\~sdd83e.tmp | path = C:\Users\DSsDPMx042\Videos\Fxinkj5Qtq47dCBmWz, prefix | True | 1 | | | | = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\videos\hakyslty-m-z9\~sdd85e.tmp | path = C:\Users\DSsDPMx042\Videos\haKYSLTY-M-z9, prefix = ~S | True | 1 | | | | D | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\videos\jycsy200xq5sf\~sdd8bc.tmp | path = C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF, prefix = ~S | True | 1 | | | | D | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\~sdd8cd.tmp | path = C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp, prefix | True | 1 | | | | = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | path = C:\Users\DSsDPMx042\Videos\JYcSy200xq5SF\gtgp\eWpNrtK | True | 1 | | | fq8j\~sdd8de.tmp | Dx2ttVnFQ8J, prefix = ~SD | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\public\~sdd91d.tmp | path = C:\Users\Public, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\public\desktop\~sdd92e.tmp | path = C:\Users\Public\Desktop, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\public\documents\~sdd92f.tmp | path = C:\Users\Public\Documents, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\public\downloads\~sdd93f.tmp | path = C:\Users\Public\Downloads, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\public\favorites\~sdd940.tmp | path = C:\Users\Public\Favorites, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\public\libraries\~sdd98f.tmp | path = C:\Users\Public\Libraries, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\public\music\~sdd9a0.tmp | path = C:\Users\Public\Music, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\public\music\sample music\~sdd9d0.tmp | path = C:\Users\Public\Music\Sample Music, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\public\pictures\~sdd9e0.tmp | path = C:\Users\Public\Pictures, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\public\pictures\sample pictures\~sdd9e1.tmp | path = C:\Users\Public\Pictures\Sample Pictures, prefix = ~S | True | 1 | | | | D | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\public\recorded tv\~sddeb3.tmp | path = C:\Users\Public\Recorded TV, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\public\recorded tv\sample media\~sddeb4.tmp | path = C:\Users\Public\Recorded TV\Sample Media, prefix = ~S | True | 1 | | | | D | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\public\videos\~sddec4.tmp | path = C:\Users\Public\Videos, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | create_tmpfile | c:\users\public\videos\sample videos\~sddec5.tmp | path = C:\Users\Public\Videos\Sample Videos, prefix = ~SD | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\bibagpmyuse2qjdfr.jpg.wncry | source_file_name = c:\users\dssdpmx042\desktop\bibagpmyuse2q | True | 1 | | | | jdfr.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\h yrmf.docx.wncry | source_file_name = c:\users\dssdpmx042\desktop\h yrmf.docx.w | True | 1 | | | | ncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\hwef8jg56gk9dlonf.csv.wncry | source_file_name = c:\users\dssdpmx042\desktop\hwef8jg56gk9d | True | 1 | | | | lonf.csv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2bnrt.xlsx.wncry | source_file_name = c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2 | True | 1 | | | | bnrt.xlsx.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\qb17mfblutnx_jw3.jpg.wncry | source_file_name = c:\users\dssdpmx042\desktop\qb17mfblutnx_ | True | 1 | | | | jw3.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\xirvpsv.pptx.wncry | source_file_name = c:\users\dssdpmx042\desktop\xirvpsv.pptx. | True | 1 | | | | wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\z89la7110x3isdf6.doc.wncry | source_file_name = c:\users\dssdpmx042\desktop\z89la7110x3is | True | 1 | | | | df6.doc.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\6pkpcf4uawt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | zg4xqlmdz.jpg.wncry | c7agszx\6pkpcf4uawtzg4xqlmdz.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg.wncry | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg.wn | | | | | | cryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\3kmod_2d6ued.swf.wncry | source_file_name = c:\users\dssdpmx042\desktop\3kmod_2d6ued. | True | 1 | | | | swf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\acndlsz4zhbdyziqkotj.mp3.wncry | source_file_name = c:\users\dssdpmx042\desktop\acndlsz4zhbdy | True | 1 | | | | ziqkotj.mp3.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\ajkh5gnvfe8rqzavym.png.wncry | source_file_name = c:\users\dssdpmx042\desktop\ajkh5gnvfe8rq | True | 1 | | | | zavym.png.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\blw7.png.wncry | source_file_name = c:\users\dssdpmx042\desktop\blw7.png.wncr | True | 1 | | | | yt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\c9dt7ht6ochw_r.flv.wncry | source_file_name = c:\users\dssdpmx042\desktop\c9dt7ht6ochw_ | True | 1 | | | | r.flv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\fycbs5cumf6dh_fs.ods.wncry | source_file_name = c:\users\dssdpmx042\desktop\fycbs5cumf6dh | True | 1 | | | | _fs.ods.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\gfs3quzvztmy-jq6xox.bmp.wncry | source_file_name = c:\users\dssdpmx042\desktop\gfs3quzvztmy- | True | 1 | | | | jq6xox.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\h4mzf.bmp.wncry | source_file_name = c:\users\dssdpmx042\desktop\h4mzf.bmp.wnc | True | 1 | | | | ryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\hyxaas7ppqlngg5ir6.mp4.wncry | source_file_name = c:\users\dssdpmx042\desktop\hyxaas7ppqlng | True | 1 | | | | g5ir6.mp4.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\kit3qjluq u1ehoy.wav.wncry | source_file_name = c:\users\dssdpmx042\desktop\kit3qjluq u1e | True | 1 | | | | hoy.wav.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\lkwb.wav.wncry | source_file_name = c:\users\dssdpmx042\desktop\lkwb.wav.wncr | True | 1 | | | | yt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\m-flkfw.pps.wncry | source_file_name = c:\users\dssdpmx042\desktop\m-flkfw.pps.w | True | 1 | | | | ncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\p6tg4g.bmp.wncry | source_file_name = c:\users\dssdpmx042\desktop\p6tg4g.bmp.wn | True | 1 | | | | cryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\ytaj9x8n5wxojmujtmi.gif.wncry | source_file_name = c:\users\dssdpmx042\desktop\ytaj9x8n5wxoj | True | 1 | | | | mujtmi.gif.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\zb1nbq.mp4.wncry | source_file_name = c:\users\dssdpmx042\desktop\zb1nbq.mp4.wn | True | 1 | | | | cryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\zu3ocp3f88cn.flv.wncry | source_file_name = c:\users\dssdpmx042\desktop\zu3ocp3f88cn. | True | 1 | | | | flv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\- jmajpm5_r | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | ro.bmp.wncry | c7agszx\- jmajpm5_rro.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\mf1nbo.swf. | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | wncry | c7agszx\mf1nbo.swf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ksln | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | i5puyuj.flv.wncry | c7agszx\0qdvmg\kslni5puyuj.flv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ntjk | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | r9csa.mp4.wncry | c7agszx\0qdvmg\ntjkr9csa.mp4.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\nxds | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | miu.odp.wncry | c7agszx\0qdvmg\nxds miu.odp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | \2h9gjyzxutjtaj vlt76.ods.wncry | c7agszx\k8vahpvastg\2h9gjyzxutjtaj vlt76.ods.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | \9wcvzyuqncphgsqczkn.png.wncry | c7agszx\k8vahpvastg\9wcvzyuqncphgsqczkn.png.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | \kpyogarb2ozckx549d.flv.wncry | c7agszx\k8vahpvastg\kpyogarb2ozckx549d.flv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | \z8mf4.avi.wncry | c7agszx\k8vahpvastg\z8mf4.avi.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | ysj1\tey_zyonktol5ojrt0io.mp4.wncry | c7agszx\lsxsfgzrgx3ysj1\tey_zyonktol5ojrt0io.mp4.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3.wncry | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3.wn | | | | | | cryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | ysj1\2tpofaj-rucn\93pm.gif.wncry | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\93pm.gif.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | ysj1\2tpofaj-rucn\cxy8v.mp4.wncry | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\cxy8v.mp4.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bmp.wncry | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bm | | | | | | p.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | ysj1\2tpofaj-rucn\yg84pi.avi.wncry | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\yg84pi.avi.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | ysj1\2tpofaj-rucn\yoo37jp7q.wav.wncry | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\yoo37jp7q.wav.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\5dwumhpov0ond.doc.wncry | source_file_name = c:\users\dssdpmx042\documents\5dwumhpov0o | True | 1 | | | | nd.doc.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\5pfcgtj7-40fzu.docx.wncry | source_file_name = c:\users\dssdpmx042\documents\5pfcgtj7-40 | True | 1 | | | | fzu.docx.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\9c54.docx.wncry | source_file_name = c:\users\dssdpmx042\documents\9c54.docx.w | True | 1 | | | | ncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\axmcb.docx.wncry | source_file_name = c:\users\dssdpmx042\documents\axmcb.docx. | True | 1 | | | | wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\f8t0d1hl8mulgw0ye.pptx.wncry | source_file_name = c:\users\dssdpmx042\documents\f8t0d1hl8mu | True | 1 | | | | lgw0ye.pptx.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\g9fp hftlrgz5w.xls.wncry | source_file_name = c:\users\dssdpmx042\documents\g9fp hftlrg | True | 1 | | | | z5w.xls.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\gmphr0w6rrpdhpbef.csv.wncry | source_file_name = c:\users\dssdpmx042\documents\gmphr0w6rrp | True | 1 | | | | dhpbef.csv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\gpimnirm chkjuih.xlsx.wncry | source_file_name = c:\users\dssdpmx042\documents\gpimnirm ch | True | 1 | | | | kjuih.xlsx.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\hemk7ngcvjguirn6.xlsx.wncry | source_file_name = c:\users\dssdpmx042\documents\hemk7ngcvjg | True | 1 | | | | uirn6.xlsx.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\kqsfgiuuv7macle5kbe.pptx.wncry | source_file_name = c:\users\dssdpmx042\documents\kqsfgiuuv7m | True | 1 | | | | acle5kbe.pptx.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\lsifcdcb6tbfbadh2jc.pptx.wncry | source_file_name = c:\users\dssdpmx042\documents\lsifcdcb6tb | True | 1 | | | | fbadh2jc.pptx.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\lu6w3pxpu3ca.xlsx.wncry | source_file_name = c:\users\dssdpmx042\documents\lu6w3pxpu3c | True | 1 | | | | a.xlsx.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\ly7o.pptx.wncry | source_file_name = c:\users\dssdpmx042\documents\ly7o.pptx.w | True | 1 | | | | ncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\qocbs.docx.wncry | source_file_name = c:\users\dssdpmx042\documents\qocbs.docx. | True | 1 | | | | wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\tcrd9un1_myjq-.pptx.wncry | source_file_name = c:\users\dssdpmx042\documents\tcrd9un1_my | True | 1 | | | | jq-.pptx.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\wv7vnssgbfodzvw.xlsx.wncry | source_file_name = c:\users\dssdpmx042\documents\wv7vnssgbfo | True | 1 | | | | dzvw.xlsx.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\yzoy0uk.pptx.wncry | source_file_name = c:\users\dssdpmx042\documents\yzoy0uk.ppt | True | 1 | | | | x.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\zwklqrq2nlske44p.xlsx.wncry | source_file_name = c:\users\dssdpmx042\documents\zwklqrq2nls | True | 1 | | | | ke44p.xlsx.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\_xgwdcsgf mjc6 j.docx.wncry | source_file_name = c:\users\dssdpmx042\documents\_xgwdcsgf m | True | 1 | | | | jc6 j.docx.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\-nap.rtf.wncry | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\-nap | True | 1 | | | | .rtf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\9o_u.pdf.wncry | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\9o_u | True | 1 | | | | .pdf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\k6fadynloup1zicvtg0o.xl | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\k6fa | True | 1 | | | sx.wncry | dynloup1zicvtg0o.xlsx.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\p3k5i8nny2aq5c.pptx.wnc | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\p3k5 | True | 1 | | | ry | i8nny2aq5c.pptx.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\y5sy7w | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | True | 1 | | | jt_a7krqnidgx.xlsx.wncry | 3zhd03fzbccc\y5sy7wjt_a7krqnidgx.xlsx.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | True | 1 | | | sbxkqajovxqwlt.csv.wncry | 3zhd03fzbccc\3e4ho\sbxkqajovxqwlt.csv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\fxx | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | fw-17sc6wh.ppt.wncry | 9gef82k2wc1srgu\fxxfw-17sc6wh.ppt.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\vsh | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | y_qomhsb5w.ppt.wncry | 9gef82k2wc1srgu\vshy_qomhsb5w.ppt.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | c-nspy xfvlw3\coafenjkmrn.xlsx.wncry | 9gef82k2wc1srgu\tedc-nspy xfvlw3\coafenjkmrn.xlsx.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\kqu8ojbhlzr.odp.wncry | source_file_name = c:\users\dssdpmx042\documents\kqu8ojbhlzr | True | 1 | | | | .odp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\qracrespejeu3.ods.wncry | source_file_name = c:\users\dssdpmx042\documents\qracrespeje | True | 1 | | | | u3.ods.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\t9kbu.ots.wncry | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\t9kb | True | 1 | | | | u.ots.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\uigp.odp.wncry | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\uigp | True | 1 | | | | .odp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\v3b5lp | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | True | 1 | | | gbpfe06xmrqjo.ots.wncry | 3zhd03fzbccc\v3b5lpgbpfe06xmrqjo.ots.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | True | 1 | | | k_5vq4jhsw8guvo.odp.wncry | 3zhd03fzbccc\3e4ho\k_5vq4jhsw8guvo.odp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | True | 1 | | | qbqa9 xzsel7xnah8.pps.wncry | 3zhd03fzbccc\3e4ho\qbqa9 xzsel7xnah8.pps.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\bzr | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | tj.pps.wncry | 9gef82k2wc1srgu\bzrtj.pps.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\lo4 | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | nczsaz.ots.wncry | 9gef82k2wc1srgu\lo4nczsaz.ots.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\nqa | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | -xbh.odp.wncry | 9gef82k2wc1srgu\nqa-xbh.odp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | c-nspy xfvlw3\-nos.ods.wncry | 9gef82k2wc1srgu\tedc-nspy xfvlw3\-nos.ods.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | c-nspy xfvlw3\axtg6ai5-.ods.wncry | 9gef82k2wc1srgu\tedc-nspy xfvlw3\axtg6ai5-.ods.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | c-nspy xfvlw3\qz1senichq4fy3oijrd.ots.wncry | 9gef82k2wc1srgu\tedc-nspy xfvlw3\qz1senichq4fy3oijrd.ots.wnc | | | | | | ryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows nt\msscan\welcomescan.j | source_file_name = c:\users\all users\microsoft\windows nt\m | True | 1 | | | pg.wncry | sscan\welcomescan.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\internet explorer\b | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | rndlog.txt.wncry | internet explorer\brndlog.txt.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | nery\bears.jpg.wncry | windows mail\stationery\bears.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | nery\garden.jpg.wncry | windows mail\stationery\garden.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | nery\greenbubbles.jpg.wncry | windows mail\stationery\greenbubbles.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | nery\handprints.jpg.wncry | windows mail\stationery\handprints.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | nery\orangecircles.jpg.wncry | windows mail\stationery\orangecircles.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | nery\peacock.jpg.wncry | windows mail\stationery\peacock.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | nery\roses.jpg.wncry | windows mail\stationery\roses.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | nery\shadesofblue.jpg.wncry | windows mail\stationery\shadesofblue.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | nery\softblue.jpg.wncry | windows mail\stationery\softblue.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | nery\stars.jpg.wncry | windows mail\stationery\stars.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\roaming\microsoft\windows\themes\tr | source_file_name = c:\users\default\appdata\roaming\microsof | True | 1 | | | anscodedwallpaper.jpg.wncry | t\windows\themes\transcodedwallpaper.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | r\brndlog.txt.wncry | ft\internet explorer\brndlog.txt.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | tionery\bears.jpg.wncry | ft\windows mail\stationery\bears.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | tionery\garden.jpg.wncry | ft\windows mail\stationery\garden.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | tionery\greenbubbles.jpg.wncry | ft\windows mail\stationery\greenbubbles.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | tionery\handprints.jpg.wncry | ft\windows mail\stationery\handprints.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | tionery\orangecircles.jpg.wncry | ft\windows mail\stationery\orangecircles.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | tionery\peacock.jpg.wncry | ft\windows mail\stationery\peacock.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | tionery\roses.jpg.wncry | ft\windows mail\stationery\roses.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | tionery\shadesofblue.jpg.wncry | ft\windows mail\stationery\shadesofblue.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | tionery\softblue.jpg.wncry | ft\windows mail\stationery\softblue.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | tionery\stars.jpg.wncry | ft\windows mail\stationery\stars.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\d56ie.csv.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\d56ie | True | 1 | | | | .csv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\dx-rnsk.jpg.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\dx-rn | True | 1 | | | | sk.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\ir5gaytbg.jpg.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\ir5ga | True | 1 | | | | ytbg.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\mpx3v.xlsx.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\mpx3v | True | 1 | | | | .xlsx.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\o7p_l.xls.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\o7p_l | True | 1 | | | | .xls.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\ozq_qxmblgn17n.pdf.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\ozq_q | True | 1 | | | | xmblgn17n.pdf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\themes | source_file_name = c:\users\dssdpmx042\appdata\roaming\micro | True | 1 | | | \transcodedwallpaper.jpg.wncry | soft\windows\themes\transcodedwallpaper.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\55woz240.jpg.wncry | source_file_name = c:\users\dssdpmx042\pictures\55woz240.jpg | True | 1 | | | | .wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\j5lndpj\rely_w0.jpg.wncry | source_file_name = c:\users\dssdpmx042\pictures\j5lndpj\rely | True | 1 | | | | _w0.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\j5lndpj\txokdckrvk.jpg.wncry | source_file_name = c:\users\dssdpmx042\pictures\j5lndpj\txok | True | 1 | | | | dckrvk.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\u0low_3k9h1go | source_file_name = c:\users\dssdpmx042\pictures\jd8vsriczqxd | True | 1 | | | py7.jpg.wncry | x9vob\u0low_3k9h1go py7.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | \uvrcjvwuev0rc6u9m.jpg.wncry | hema\g7vbdhsavpjrp7\uvrcjvwuev0rc6u9m.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\_2hzdo\soyiwozbtzrklfzgmav.jpg. | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\soyiw | True | 1 | | | wncry | ozbtzrklfzgmav.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\pictures\sample pictures\chrysanthemum.jpg.w | source_file_name = c:\users\public\pictures\sample pictures\ | True | 1 | | | ncry | chrysanthemum.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\pictures\sample pictures\desert.jpg.wncry | source_file_name = c:\users\public\pictures\sample pictures\ | True | 1 | | | | desert.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\pictures\sample pictures\hydrangeas.jpg.wncr | source_file_name = c:\users\public\pictures\sample pictures\ | True | 1 | | | y | hydrangeas.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\pictures\sample pictures\jellyfish.jpg.wncry | source_file_name = c:\users\public\pictures\sample pictures\ | True | 1 | | | | jellyfish.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\pictures\sample pictures\koala.jpg.wncry | source_file_name = c:\users\public\pictures\sample pictures\ | True | 1 | | | | koala.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\pictures\sample pictures\lighthouse.jpg.wncr | source_file_name = c:\users\public\pictures\sample pictures\ | True | 1 | | | y | lighthouse.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\pictures\sample pictures\penguins.jpg.wncry | source_file_name = c:\users\public\pictures\sample pictures\ | True | 1 | | | | penguins.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\pictures\sample pictures\tulips.jpg.wncry | source_file_name = c:\users\public\pictures\sample pictures\ | True | 1 | | | | tulips.jpg.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\bootsect.bak.wncry | source_file_name = c:\bootsect.bak.wncryt | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\device stage\device\{113527a4-4 | source_file_name = c:\users\all users\microsoft\device stage | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\background.png.wncry | \device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.pn | | | | | | g.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\device stage\device\{113527a4-4 | source_file_name = c:\users\all users\microsoft\device stage | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\device.png.wncry | \device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png.wn | | | | | | cryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\device stage\device\{113527a4-4 | source_file_name = c:\users\all users\microsoft\device stage | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\overlay.png.wncry | \device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png.w | | | | | | ncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\device stage\device\{113527a4-4 | source_file_name = c:\users\all users\microsoft\device stage | True | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\superbar.png.wncry | \device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png. | | | | | | wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\device stage\device\{8702d817-5 | source_file_name = c:\users\all users\microsoft\device stage | True | 1 | | | aad-4674-9ef3-4d3decd87120}\background.png.wncry | \device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.pn | | | | | | g.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\device stage\device\{8702d817-5 | source_file_name = c:\users\all users\microsoft\device stage | True | 1 | | | aad-4674-9ef3-4d3decd87120}\watermark.png.wncry | \device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png | | | | | | .wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\search\data\applications\window | source_file_name = c:\users\all users\microsoft\search\data\ | True | 1 | | | s\windows.edb.wncry | applications\windows\windows.edb.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\guest.bmp | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | .wncry | pictures\guest.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\user.bmp. | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | wncry | pictures\user.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile10.bmp.wncry | pictures\default pictures\usertile10.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile11.bmp.wncry | pictures\default pictures\usertile11.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile12.bmp.wncry | pictures\default pictures\usertile12.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile13.bmp.wncry | pictures\default pictures\usertile13.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile14.bmp.wncry | pictures\default pictures\usertile14.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile15.bmp.wncry | pictures\default pictures\usertile15.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile16.bmp.wncry | pictures\default pictures\usertile16.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile17.bmp.wncry | pictures\default pictures\usertile17.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile18.bmp.wncry | pictures\default pictures\usertile18.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile19.bmp.wncry | pictures\default pictures\usertile19.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile20.bmp.wncry | pictures\default pictures\usertile20.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile21.bmp.wncry | pictures\default pictures\usertile21.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile22.bmp.wncry | pictures\default pictures\usertile22.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile23.bmp.wncry | pictures\default pictures\usertile23.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile24.bmp.wncry | pictures\default pictures\usertile24.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile25.bmp.wncry | pictures\default pictures\usertile25.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile26.bmp.wncry | pictures\default pictures\usertile26.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile27.bmp.wncry | pictures\default pictures\usertile27.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile28.bmp.wncry | pictures\default pictures\usertile28.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile29.bmp.wncry | pictures\default pictures\usertile29.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile30.bmp.wncry | pictures\default pictures\usertile30.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile31.bmp.wncry | pictures\default pictures\usertile31.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile32.bmp.wncry | pictures\default pictures\usertile32.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile33.bmp.wncry | pictures\default pictures\usertile33.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile34.bmp.wncry | pictures\default pictures\usertile34.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile35.bmp.wncry | pictures\default pictures\usertile35.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile36.bmp.wncry | pictures\default pictures\usertile36.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile37.bmp.wncry | pictures\default pictures\usertile37.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile38.bmp.wncry | pictures\default pictures\usertile38.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile39.bmp.wncry | pictures\default pictures\usertile39.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile40.bmp.wncry | pictures\default pictures\usertile40.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile41.bmp.wncry | pictures\default pictures\usertile41.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile42.bmp.wncry | pictures\default pictures\usertile42.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile43.bmp.wncry | pictures\default pictures\usertile43.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | ictures\usertile44.bmp.wncry | pictures\default pictures\usertile44.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\caches\cversions.2.db.w | source_file_name = c:\users\all users\microsoft\windows\cach | True | 1 | | | ncry | es\cversions.2.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\caches\{67d69890-d853-4 | source_file_name = c:\users\all users\microsoft\windows\cach | True | 1 | | | 011-a87e-aa64fa83ce5a}.2.ver0x0000000000000002.db.wncry | es\{67d69890-d853-4011-a87e-aa64fa83ce5a}.2.ver0x00000000000 | | | | | | 00002.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | source_file_name = c:\users\all users\microsoft\windows\cach | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000004.db.wncry | es\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x00000000000 | | | | | | 00004.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | source_file_name = c:\users\all users\microsoft\windows\cach | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db.wncry | es\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x00000000000 | | | | | | 00005.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | source_file_name = c:\users\all users\microsoft\windows\cach | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000006.db.wncry | es\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x00000000000 | | | | | | 00006.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | source_file_name = c:\users\all users\microsoft\windows\cach | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000007.db.wncry | es\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x00000000000 | | | | | | 00007.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\caches\{7cd55808-3d38-4 | source_file_name = c:\users\all users\microsoft\windows\cach | True | 1 | | | dd5-90c9-62f0e6ee60d4}.2.ver0x0000000000000001.db.wncry | es\{7cd55808-3d38-4dd5-90c9-62f0e6ee60d4}.2.ver0x00000000000 | | | | | | 00001.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\caches\{ddf571f2-be98-4 | source_file_name = c:\users\all users\microsoft\windows\cach | True | 1 | | | 26d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db.wncry | es\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x00000000000 | | | | | | 00002.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 01.w | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | ma.wncry | tones\ringtone 01.wma.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 02.w | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | ma.wncry | tones\ringtone 02.wma.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 03.w | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | ma.wncry | tones\ringtone 03.wma.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 04.w | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | ma.wncry | tones\ringtone 04.wma.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 05.w | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | ma.wncry | tones\ringtone 05.wma.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 06.w | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | ma.wncry | tones\ringtone 06.wma.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 07.w | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | ma.wncry | tones\ringtone 07.wma.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 08.w | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | ma.wncry | tones\ringtone 08.wma.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 09.w | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | ma.wncry | tones\ringtone 09.wma.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 10.w | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | ma.wncry | tones\ringtone 10.wma.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\e | source_file_name = c:\users\all users\microsoft\windows nt\m | True | 1 | | | n-us\welcomefax.tif.wncry | sfax\virtualinbox\en-us\welcomefax.tif.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\iconcache.db.wncry | source_file_name = c:\users\default\appdata\local\iconcache. | True | 1 | | | | db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows\explorer\th | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | umbcache_256.db.wncry | windows\explorer\thumbcache_256.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows\explorer\th | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | umbcache_idx.db.wncry | windows\explorer\thumbcache_idx.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\iconcache.db.wncry | source_file_name = c:\users\dssdpmx042\appdata\local\iconcac | True | 1 | | | | he.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | r\brndlog.bak.wncry | ft\internet explorer\brndlog.bak.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\c | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | versions.1.db.wncry | ft\windows\caches\cversions.1.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000 | ft\windows\caches\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.v | | | | | f.db.wncry | er0x000000000000000f.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001 | ft\windows\caches\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.v | | | | | 0.db.wncry | er0x0000000000000010.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | \thumbcache_256.db.wncry | ft\windows\explorer\thumbcache_256.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | \thumbcache_32.db.wncry | ft\windows\explorer\thumbcache_32.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | \thumbcache_96.db.wncry | ft\windows\explorer\thumbcache_96.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | \thumbcache_idx.db.wncry | ft\windows\explorer\thumbcache_idx.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\bp7n0_qwtwkorxg.mp3.wncr | source_file_name = c:\users\dssdpmx042\appdata\roaming\bp7n0 | True | 1 | | | y | _qwtwkorxg.mp3.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\bywi0qluwl3w9bud5f3o.gif | source_file_name = c:\users\dssdpmx042\appdata\roaming\bywi0 | True | 1 | | | .wncry | qluwl3w9bud5f3o.gif.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\dayij9-o1e8.bmp.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\dayij | True | 1 | | | | 9-o1e8.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\dhlstwctu20.swf.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\dhlst | True | 1 | | | | wctu20.swf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\djlklpzvvty.swf.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\djlkl | True | 1 | | | | pzvvty.swf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\dz0vptp5owvhzt.bmp.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\dz0vp | True | 1 | | | | tp5owvhzt.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\g2kjjoggr_cgbs8b.flv.wnc | source_file_name = c:\users\dssdpmx042\appdata\roaming\g2kjj | True | 1 | | | ry | oggr_cgbs8b.flv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\g_iap-kg5-s.wav.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\g_iap | True | 1 | | | | -kg5-s.wav.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\jqzjf0k.bmp.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\jqzjf | True | 1 | | | | 0k.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\mhjvg24dofm.pps.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\mhjvg | True | 1 | | | | 24dofm.pps.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\nrae.png.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\nrae. | True | 1 | | | | png.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\o8fcddpbkgpe-.swf.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\o8fcd | True | 1 | | | | dpbkgpe-.swf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\ojefr7lfa6sgok2mjmm.mp3. | source_file_name = c:\users\dssdpmx042\appdata\roaming\ojefr | True | 1 | | | wncry | 7lfa6sgok2mjmm.mp3.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\orfn2vwitjww5.bmp.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\orfn2 | True | 1 | | | | vwitjww5.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\ph1dzo_.png.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\ph1dz | True | 1 | | | | o_.png.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\qq1a2p8piiy_edbcli.mkv.w | source_file_name = c:\users\dssdpmx042\appdata\roaming\qq1a2 | True | 1 | | | ncry | p8piiy_edbcli.mkv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\qwg2cvfqc9ez1jca.mp3.wnc | source_file_name = c:\users\dssdpmx042\appdata\roaming\qwg2c | True | 1 | | | ry | vfqc9ez1jca.mp3.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\ra-n6lubasx5.swf.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\ra-n6 | True | 1 | | | | lubasx5.swf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\rjwem.avi.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\rjwem | True | 1 | | | | .avi.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\sh5e3mmjvux.mkv.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\sh5e3 | True | 1 | | | | mmjvux.mkv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\sl9ersroh9zeq.png.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\sl9er | True | 1 | | | | sroh9zeq.png.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\uaebzgeiegneodnlxncn.mkv | source_file_name = c:\users\dssdpmx042\appdata\roaming\uaebz | True | 1 | | | .wncry | geiegneodnlxncn.mkv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\ultbjg f.pps.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\ultbj | True | 1 | | | | g f.pps.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\uywba9uh15vmu3etzhh-.mkv | source_file_name = c:\users\dssdpmx042\appdata\roaming\uywba | True | 1 | | | .wncry | 9uh15vmu3etzhh-.mkv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\vsm1crhdjx95vtws.flv.wnc | source_file_name = c:\users\dssdpmx042\appdata\roaming\vsm1c | True | 1 | | | ry | rhdjx95vtws.flv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\wgxrl2.odt.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\wgxrl | True | 1 | | | | 2.odt.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\xdsqx_wxf9k9q.bmp.wncry | source_file_name = c:\users\dssdpmx042\appdata\roaming\xdsqx | True | 1 | | | | _wxf9k9q.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\xf1j6kjktjpo ac8gr6.ots. | source_file_name = c:\users\dssdpmx042\appdata\roaming\xf1j6 | True | 1 | | | wncry | kjktjpo ac8gr6.ots.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\zmej2xz6d3on_bh9gk7g.wav | source_file_name = c:\users\dssdpmx042\appdata\roaming\zmej2 | True | 1 | | | .wncry | xz6d3on_bh9gk7g.wav.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\dfkh.wav.wncry | source_file_name = c:\users\dssdpmx042\music\dfkh.wav.wncryt | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\hmdiztpptjk3.wav.wncry | source_file_name = c:\users\dssdpmx042\music\hmdiztpptjk3.wa | True | 1 | | | | v.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\zptabq.mp3.wncry | source_file_name = c:\users\dssdpmx042\music\zptabq.mp3.wncr | True | 1 | | | | yt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\lk-vjlkc3mbxebkrauk.wa | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\lk- | True | 1 | | | v.wncry | vjlkc3mbxebkrauk.wav.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\9 bxr.wav.wncry | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\fqn | True | 1 | | | | e\9 bxr.wav.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\bm1lj1elmahv.wav. | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\fqn | True | 1 | | | wncry | e\bm1lj1elmahv.wav.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\hwq_e63aib.wav.wn | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\fqn | True | 1 | | | cry | e\hwq_e63aib.wav.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\qni_.mp3.wncry | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\fqn | True | 1 | | | | e\qni_.mp3.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\zhvacu3zm4pi0lqv. | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\fqn | True | 1 | | | mp3.wncry | e\zhvacu3zm4pi0lqv.mp3.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\0qrd5fx.mp3.wn | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\gzf | True | 1 | | | cry | r8pq\0qrd5fx.mp3.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\vox09umk.mp3.w | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\gzf | True | 1 | | | ncry | r8pq\vox09umk.mp3.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\2reugw.wav.wncry | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | | j\2reugw.wav.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\4sarhcvjd04q.mp3. | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | wncry | j\4sarhcvjd04q.mp3.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\9z_ehnks.wav.wncr | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | y | j\9z_ehnks.wav.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\c5alotv4.wav.wncr | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | y | j\c5alotv4.wav.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\kfqjlmnelq.mp3.wn | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | cry | j\kfqjlmnelq.mp3.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\mlx4g8dg4dbcwao4. | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | wav.wncry | j\mlx4g8dg4dbcwao4.wav.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\0-sd9l8u\dji4emfc | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | xz9.wav.wncry | j\0-sd9l8u\dji4emfcxz9.wav.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\r4lsao\csxh-dp0pz | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | vfbfnnd.mp3.wncry | j\r4lsao\csxh-dp0pzvfbfnnd.mp3.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\gi9i | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | p_csel.mp3.wncry | j\zhuw0ma_qhqt\gi9ip_csel.mp3.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\s9_2 | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | q.wav.wncry | j\zhuw0ma_qhqt\s9_2q.wav.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\xysc | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | fw4.mp3.wncry | j\zhuw0ma_qhqt\xyscfw4.mp3.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\aicirck.gif.wncry | source_file_name = c:\users\dssdpmx042\pictures\aicirck.gif. | True | 1 | | | | wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\drba.bmp.wncry | source_file_name = c:\users\dssdpmx042\pictures\drba.bmp.wnc | True | 1 | | | | ryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\eszy hkfdwfx0.bmp.wncry | source_file_name = c:\users\dssdpmx042\pictures\eszy hkfdwfx | True | 1 | | | | 0.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\imjwbtsshxgloi.gif.wncry | source_file_name = c:\users\dssdpmx042\pictures\imjwbtsshxgl | True | 1 | | | | oi.gif.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\n5vvg0h1npv.bmp.wncry | source_file_name = c:\users\dssdpmx042\pictures\n5vvg0h1npv. | True | 1 | | | | bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\pwvh0sxs 4u.gif.wncry | source_file_name = c:\users\dssdpmx042\pictures\pwvh0sxs 4u. | True | 1 | | | | gif.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\r9tluytrypiqhwf.gif.wncry | source_file_name = c:\users\dssdpmx042\pictures\r9tluytrypiq | True | 1 | | | | hwf.gif.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\_y79.bmp.wncry | source_file_name = c:\users\dssdpmx042\pictures\_y79.bmp.wnc | True | 1 | | | | ryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\j5lndpj\5he-bihy791udb060xb.gif | source_file_name = c:\users\dssdpmx042\pictures\j5lndpj\5he- | True | 1 | | | .wncry | bihy791udb060xb.gif.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\j5lndpj\jgg9piy6c.bmp.wncry | source_file_name = c:\users\dssdpmx042\pictures\j5lndpj\jgg9 | True | 1 | | | | piy6c.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\4r2l.png.wncr | source_file_name = c:\users\dssdpmx042\pictures\jd8vsriczqxd | True | 1 | | | y | x9vob\4r2l.png.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\wosctyozygi-. | source_file_name = c:\users\dssdpmx042\pictures\jd8vsriczqxd | True | 1 | | | png.wncry | x9vob\wosctyozygi-.png.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\d0ifk_s5cqbrv.png.wncr | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\d0i | True | 1 | | | y | fk_s5cqbrv.png.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\h pgorp n6u.bmp.wncry | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\h p | True | 1 | | | | gorp n6u.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\rgfjlx032dp7.gif.wncry | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\rgf | True | 1 | | | | jlx032dp7.gif.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\wu4tbykxf6k0p.bmp.wncr | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\wu4 | True | 1 | | | y | tbykxf6k0p.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\xqj6y5vsd79ypdjyjlfn.p | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\xqj | True | 1 | | | ng.wncry | 6y5vsd79ypdjyjlfn.png.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\zlpvbnitdrc.png.wncry | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\zlp | True | 1 | | | | vbnitdrc.png.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\_nmlicbf8j8nqyjj7kp.bm | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\_nm | True | 1 | | | p.wncry | licbf8j8nqyjj7kp.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\2bzr.gif.wncry | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | | hema\2bzr.gif.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\khl4ego4d 5rt4 | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | l.bmp.wncry | hema\khl4ego4d 5rt4l.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\spxsplgrt3p.pn | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | g.wncry | hema\spxsplgrt3p.png.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\xyz8ce1lhaimq. | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | gif.wncry | hema\xyz8ce1lhaimq.gif.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\awko | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | rjfj_tbwlbiowt.png.wncry | hema\bhbsuwyvu\awkorjfj_tbwlbiowt.png.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\mnu7 | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | k.png.wncry | hema\bhbsuwyvu\mnu7k.png.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\oxdt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | .png.wncry | hema\bhbsuwyvu\oxdt.png.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | \mhanq6ms_jz ssx.png.wncry | hema\g7vbdhsavpjrp7\mhanq6ms_jz ssx.png.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\_2hzdo\8r-qyt.png.wncry | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\8r-qy | True | 1 | | | | t.png.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\_2hzdo\ddw1j2dvm.bmp.wncry | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\ddw1j | True | 1 | | | | 2dvm.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\_2hzdo\ehtgsx0.bmp.wncry | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\ehtgs | True | 1 | | | | x0.bmp.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\_2hzdo\oiputxj.png.wncry | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\oiput | True | 1 | | | | xj.png.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\_2hzdo\wxqsaaq6i.gif.wncry | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\wxqsa | True | 1 | | | | aq6i.gif.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\0rt9n7waqqvk6-s.swf.wncry | source_file_name = c:\users\dssdpmx042\videos\0rt9n7waqqvk6- | True | 1 | | | | s.swf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\gls-an3bnb6su.mkv.wncry | source_file_name = c:\users\dssdpmx042\videos\gls-an3bnb6su. | True | 1 | | | | mkv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\hi-kh7n3amacgd.mkv.wncry | source_file_name = c:\users\dssdpmx042\videos\hi-kh7n3amacgd | True | 1 | | | | .mkv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\ouvp28f9ewmi29.swf.wncry | source_file_name = c:\users\dssdpmx042\videos\ouvp28f9ewmi29 | True | 1 | | | | .swf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\rlh2om7hsceo6pzume.swf.wncry | source_file_name = c:\users\dssdpmx042\videos\rlh2om7hsceo6p | True | 1 | | | | zume.swf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\676ht6zbx.mkv. | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | True | 1 | | | wncry | bmwz\676ht6zbx.mkv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\929sjpu-xrkj3e | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | True | 1 | | | 1t9j7.mkv.wncry | bmwz\929sjpu-xrkj3e1t9j7.mkv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\bcyq1.flv.wncr | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | True | 1 | | | y | bmwz\bcyq1.flv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\hve _ffgg.avi. | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | True | 1 | | | wncry | bmwz\hve _ffgg.avi.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\oia-6xvkp.swf. | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | True | 1 | | | wncry | bmwz\oia-6xvkp.swf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\peij538fk.mp4. | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | True | 1 | | | wncry | bmwz\peij538fk.mp4.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\hakyslty-m-z9\2iw7k-.mkv.wncry | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | True | 1 | | | | 2iw7k-.mkv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\hakyslty-m-z9\kdlazanuxnjlg4yrhvf | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | True | 1 | | | q.mp4.wncry | kdlazanuxnjlg4yrhvfq.mp4.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\hakyslty-m-z9\l1fq7b itpwhhcdab05 | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | True | 1 | | | u.avi.wncry | l1fq7b itpwhhcdab05u.avi.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\hakyslty-m-z9\lhhbjhevi.mkv.wncry | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | True | 1 | | | | lhhbjhevi.mkv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\hakyslty-m-z9\milwbj.flv.wncry | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | True | 1 | | | | milwbj.flv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\hakyslty-m-z9\mr1ex3.swf.wncry | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | True | 1 | | | | mr1ex3.swf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\hakyslty-m-z9\vc2cl4ln.mkv.wncry | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | True | 1 | | | | vc2cl4ln.mkv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\4oj9yfl3dn.flv.wncr | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | y | 4oj9yfl3dn.flv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\agmtjgfx.mkv.wncry | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | agmtjgfx.mkv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\hsbc.mkv.wncry | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | hsbc.mkv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\hwj0zzo_r1q_pfff2.a | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | vi.wncry | hwj0zzo_r1q_pfff2.avi.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\kj9gatk fbtmtzat.sw | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | f.wncry | kj9gatk fbtmtzat.swf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\nbuaos9o4zd04f6rvgq | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | y.swf.wncry | nbuaos9o4zd04f6rvgqy.swf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\rh6x.mp4.wncry | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | rh6x.mp4.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\_akuod4i4xu431o1mvn | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | e.flv.wncry | _akuod4i4xu431o1mvne.flv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\gdhhhwnb.flv.w | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | ncry | gtgp\gdhhhwnb.flv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\t0_1iokbd.swf. | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | wncry | gtgp\t0_1iokbd.swf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\vbvvvvb4i.mkv. | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | wncry | gtgp\vbvvvvb4i.mkv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ydjjqoani2hety | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | 5e.mkv.wncry | gtgp\ydjjqoani2hety5e.mkv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | fq8j\87xpzn.mp4.wncry | gtgp\ewpnrtkdx2ttvnfq8j\87xpzn.mp4.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | fq8j\dd3qogjnlsgkg1--_vs.mkv.wncry | gtgp\ewpnrtkdx2ttvnfq8j\dd3qogjnlsgkg1--_vs.mkv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | fq8j\djqc-.mkv.wncry | gtgp\ewpnrtkdx2ttvnfq8j\djqc-.mkv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | fq8j\immdtks6k.flv.wncry | gtgp\ewpnrtkdx2ttvnfq8j\immdtks6k.flv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | fq8j\osbg1m5t.flv.wncry | gtgp\ewpnrtkdx2ttvnfq8j\osbg1m5t.flv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | fq8j\qa9nxio402_he z.swf.wncry | gtgp\ewpnrtkdx2ttvnfq8j\qa9nxio402_he z.swf.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\music\sample music\kalimba.mp3.wncry | source_file_name = c:\users\public\music\sample music\kalimb | True | 1 | | | | a.mp3.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\music\sample music\maid with the flaxen hair | source_file_name = c:\users\public\music\sample music\maid w | True | 1 | | | .mp3.wncry | ith the flaxen hair.mp3.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\music\sample music\sleep away.mp3.wncry | source_file_name = c:\users\public\music\sample music\sleep | True | 1 | | | | away.mp3.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\videos\sample videos\wildlife.wmv.wncry | source_file_name = c:\users\public\videos\sample videos\wild | True | 1 | | | | life.wmv.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\autoexec.bat.wncry | source_file_name = c:\autoexec.bat.wncryt | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows\explorer\th | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | umbcache_1024.db.wncry | windows\explorer\thumbcache_1024.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows\explorer\th | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | umbcache_32.db.wncry | windows\explorer\thumbcache_32.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows\explorer\th | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | umbcache_96.db.wncry | windows\explorer\thumbcache_96.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows\explorer\th | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | umbcache_sr.db.wncry | windows\explorer\thumbcache_sr.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | \thumbcache_1024.db.wncry | ft\windows\explorer\thumbcache_1024.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | \thumbcache_sr.db.wncry | ft\windows\explorer\thumbcache_sr.db.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | source_file_name = c:\users\dssdpmx042\appdata\roaming\micro | True | 1 | | | s\low\dssdpmx042@google[2].txt.wncry | soft\windows\cookies\low\dssdpmx042@google[2].txt.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | source_file_name = c:\users\dssdpmx042\appdata\roaming\micro | True | 1 | | | s\low\dssdpmx042@java[1].txt.wncry | soft\windows\cookies\low\dssdpmx042@java[1].txt.wncryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | source_file_name = c:\users\dssdpmx042\appdata\roaming\micro | True | 1 | | | s\low\dssdpmx042@oracle.112.2o7[2].txt.wncry | soft\windows\cookies\low\dssdpmx042@oracle.112.2o7[2].txt.wn | | | | | | cryt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\hibsys.wncryt | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\0.wncryt | source_file_name = c:\users\dssdpmx042\desktop\bibagpmyuse2q | True | 1 | | | | jdfr.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\1.wncryt | source_file_name = c:\users\dssdpmx042\desktop\bibagpmyuse2q | False | 1 | | | | jdfr.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\bibagpmyuse2qjdfr.jpg | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\1.wncryt | source_file_name = c:\users\dssdpmx042\desktop\h yrmf.docx | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\2.wncryt | source_file_name = c:\users\dssdpmx042\desktop\h yrmf.docx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\h yrmf.docx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\2.wncryt | source_file_name = c:\users\dssdpmx042\desktop\hwef8jg56gk9d | True | 1 | | | | lonf.csv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\3.wncryt | source_file_name = c:\users\dssdpmx042\desktop\hwef8jg56gk9d | False | 1 | | | | lonf.csv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\hwef8jg56gk9dlonf.csv | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\3.wncryt | source_file_name = c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2 | True | 1 | | | | bnrt.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\4.wncryt | source_file_name = c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2 | False | 1 | | | | bnrt.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2bnrt.xlsx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\4.wncryt | source_file_name = c:\users\dssdpmx042\desktop\qb17mfblutnx_ | True | 1 | | | | jw3.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\5.wncryt | source_file_name = c:\users\dssdpmx042\desktop\qb17mfblutnx_ | False | 1 | | | | jw3.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\qb17mfblutnx_jw3.jpg | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\5.wncryt | source_file_name = c:\users\dssdpmx042\desktop\xirvpsv.pptx | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\6.wncryt | source_file_name = c:\users\dssdpmx042\desktop\xirvpsv.pptx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\xirvpsv.pptx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\6.wncryt | source_file_name = c:\users\dssdpmx042\desktop\z89la7110x3is | True | 1 | | | | df6.doc | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\7.wncryt | source_file_name = c:\users\dssdpmx042\desktop\z89la7110x3is | False | 1 | | | | df6.doc | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\z89la7110x3isdf6.doc | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\7.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\6pkpcf4uawtzg4xqlmdz.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\8.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\6pkpcf4uawtzg4xqlmdz.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\6pkpcf4uawt | | True | 2 | | | zg4xqlmdz.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\8.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\9.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | True | 2 | | | ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\9.wncryt | source_file_name = c:\users\dssdpmx042\desktop\3kmod_2d6ued. | True | 1 | | | | swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\10.wncryt | source_file_name = c:\users\dssdpmx042\desktop\3kmod_2d6ued. | False | 1 | | | | swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\3kmod_2d6ued.swf | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\10.wncryt | source_file_name = c:\users\dssdpmx042\desktop\acndlsz4zhbdy | True | 1 | | | | ziqkotj.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\11.wncryt | source_file_name = c:\users\dssdpmx042\desktop\acndlsz4zhbdy | False | 1 | | | | ziqkotj.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\acndlsz4zhbdyziqkotj.mp3 | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\11.wncryt | source_file_name = c:\users\dssdpmx042\desktop\ajkh5gnvfe8rq | True | 1 | | | | zavym.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\12.wncryt | source_file_name = c:\users\dssdpmx042\desktop\ajkh5gnvfe8rq | False | 1 | | | | zavym.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\ajkh5gnvfe8rqzavym.png | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\12.wncryt | source_file_name = c:\users\dssdpmx042\desktop\blw7.png | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\13.wncryt | source_file_name = c:\users\dssdpmx042\desktop\blw7.png | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\blw7.png | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\13.wncryt | source_file_name = c:\users\dssdpmx042\desktop\c9dt7ht6ochw_ | True | 1 | | | | r.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\14.wncryt | source_file_name = c:\users\dssdpmx042\desktop\c9dt7ht6ochw_ | False | 1 | | | | r.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\c9dt7ht6ochw_r.flv | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\14.wncryt | source_file_name = c:\users\dssdpmx042\desktop\fycbs5cumf6dh | True | 1 | | | | _fs.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\15.wncryt | source_file_name = c:\users\dssdpmx042\desktop\fycbs5cumf6dh | False | 1 | | | | _fs.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\fycbs5cumf6dh_fs.ods | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\15.wncryt | source_file_name = c:\users\dssdpmx042\desktop\gfs3quzvztmy- | True | 1 | | | | jq6xox.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\16.wncryt | source_file_name = c:\users\dssdpmx042\desktop\gfs3quzvztmy- | False | 1 | | | | jq6xox.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\gfs3quzvztmy-jq6xox.bmp | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\16.wncryt | source_file_name = c:\users\dssdpmx042\desktop\h4mzf.bmp | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\17.wncryt | source_file_name = c:\users\dssdpmx042\desktop\h4mzf.bmp | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\h4mzf.bmp | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\17.wncryt | source_file_name = c:\users\dssdpmx042\desktop\hyxaas7ppqlng | True | 1 | | | | g5ir6.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\18.wncryt | source_file_name = c:\users\dssdpmx042\desktop\hyxaas7ppqlng | False | 1 | | | | g5ir6.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\hyxaas7ppqlngg5ir6.mp4 | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\18.wncryt | source_file_name = c:\users\dssdpmx042\desktop\kit3qjluq u1e | True | 1 | | | | hoy.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\19.wncryt | source_file_name = c:\users\dssdpmx042\desktop\kit3qjluq u1e | False | 1 | | | | hoy.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\kit3qjluq u1ehoy.wav | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\19.wncryt | source_file_name = c:\users\dssdpmx042\desktop\lkwb.wav | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\20.wncryt | source_file_name = c:\users\dssdpmx042\desktop\lkwb.wav | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\lkwb.wav | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\20.wncryt | source_file_name = c:\users\dssdpmx042\desktop\m-flkfw.pps | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\21.wncryt | source_file_name = c:\users\dssdpmx042\desktop\m-flkfw.pps | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\m-flkfw.pps | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\21.wncryt | source_file_name = c:\users\dssdpmx042\desktop\p6tg4g.bmp | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\22.wncryt | source_file_name = c:\users\dssdpmx042\desktop\p6tg4g.bmp | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\p6tg4g.bmp | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\22.wncryt | source_file_name = c:\users\dssdpmx042\desktop\ytaj9x8n5wxoj | True | 1 | | | | mujtmi.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\23.wncryt | source_file_name = c:\users\dssdpmx042\desktop\ytaj9x8n5wxoj | False | 1 | | | | mujtmi.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\ytaj9x8n5wxojmujtmi.gif | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\23.wncryt | source_file_name = c:\users\dssdpmx042\desktop\zb1nbq.mp4 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\24.wncryt | source_file_name = c:\users\dssdpmx042\desktop\zb1nbq.mp4 | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\zb1nbq.mp4 | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\24.wncryt | source_file_name = c:\users\dssdpmx042\desktop\zu3ocp3f88cn. | True | 1 | | | | flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\25.wncryt | source_file_name = c:\users\dssdpmx042\desktop\zu3ocp3f88cn. | False | 1 | | | | flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\zu3ocp3f88cn.flv | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\25.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\- jmajpm5_rro.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\26.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\- jmajpm5_rro.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\- jmajpm5_r | | True | 2 | | | ro.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\26.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\mf1nbo.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\27.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\mf1nbo.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\mf1nbo.swf | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\27.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\0qdvmg\kslni5puyuj.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\28.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\0qdvmg\kslni5puyuj.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ksln | | True | 2 | | | i5puyuj.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\28.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\0qdvmg\ntjkr9csa.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\29.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\0qdvmg\ntjkr9csa.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\ntjk | | True | 2 | | | r9csa.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\29.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\0qdvmg\nxds miu.odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\30.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\0qdvmg\nxds miu.odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\0qdvmg\nxds | | True | 2 | | | miu.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\30.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\k8vahpvastg\2h9gjyzxutjtaj vlt76.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\31.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\k8vahpvastg\2h9gjyzxutjtaj vlt76.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | | True | 2 | | | \2h9gjyzxutjtaj vlt76.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\31.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\k8vahpvastg\9wcvzyuqncphgsqczkn.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\32.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\k8vahpvastg\9wcvzyuqncphgsqczkn.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | | True | 2 | | | \9wcvzyuqncphgsqczkn.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\32.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\k8vahpvastg\kpyogarb2ozckx549d.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\33.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\k8vahpvastg\kpyogarb2ozckx549d.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | | True | 2 | | | \kpyogarb2ozckx549d.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\33.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\k8vahpvastg\z8mf4.avi | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\34.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\k8vahpvastg\z8mf4.avi | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\k8vahpvastg | | True | 2 | | | \z8mf4.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\34.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\tey_zyonktol5ojrt0io.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\35.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\tey_zyonktol5ojrt0io.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | True | 2 | | | ysj1\tey_zyonktol5ojrt0io.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\35.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\36.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | True | 2 | | | ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\36.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\93pm.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\37.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\93pm.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | True | 2 | | | ysj1\2tpofaj-rucn\93pm.gif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\37.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\cxy8v.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\38.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\cxy8v.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | True | 2 | | | ysj1\2tpofaj-rucn\cxy8v.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\38.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bm | | | | | | p | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\39.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bm | | | | | | p | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | True | 2 | | | ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\39.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\yg84pi.avi | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\40.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\yg84pi.avi | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | True | 2 | | | ysj1\2tpofaj-rucn\yg84pi.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\40.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | True | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\yoo37jp7q.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\41.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\yoo37jp7q.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\desktop\pgm8zh2abxrdyc7agszx\lsxsfgzrgx3 | | True | 2 | | | ysj1\2tpofaj-rucn\yoo37jp7q.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\41.wncryt | source_file_name = c:\users\dssdpmx042\documents\5dwumhpov0o | True | 1 | | | | nd.doc | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\42.wncryt | source_file_name = c:\users\dssdpmx042\documents\5dwumhpov0o | False | 1 | | | | nd.doc | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\5dwumhpov0ond.doc | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\42.wncryt | source_file_name = c:\users\dssdpmx042\documents\5pfcgtj7-40 | True | 1 | | | | fzu.docx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\43.wncryt | source_file_name = c:\users\dssdpmx042\documents\5pfcgtj7-40 | False | 1 | | | | fzu.docx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\5pfcgtj7-40fzu.docx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\43.wncryt | source_file_name = c:\users\dssdpmx042\documents\9c54.docx | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\44.wncryt | source_file_name = c:\users\dssdpmx042\documents\9c54.docx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\9c54.docx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\44.wncryt | source_file_name = c:\users\dssdpmx042\documents\axmcb.docx | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\45.wncryt | source_file_name = c:\users\dssdpmx042\documents\axmcb.docx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\axmcb.docx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\45.wncryt | source_file_name = c:\users\dssdpmx042\documents\f8t0d1hl8mu | True | 1 | | | | lgw0ye.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\46.wncryt | source_file_name = c:\users\dssdpmx042\documents\f8t0d1hl8mu | False | 1 | | | | lgw0ye.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\f8t0d1hl8mulgw0ye.pptx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\46.wncryt | source_file_name = c:\users\dssdpmx042\documents\g9fp hftlrg | True | 1 | | | | z5w.xls | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\47.wncryt | source_file_name = c:\users\dssdpmx042\documents\g9fp hftlrg | False | 1 | | | | z5w.xls | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\g9fp hftlrgz5w.xls | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\47.wncryt | source_file_name = c:\users\dssdpmx042\documents\gmphr0w6rrp | True | 1 | | | | dhpbef.csv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\48.wncryt | source_file_name = c:\users\dssdpmx042\documents\gmphr0w6rrp | False | 1 | | | | dhpbef.csv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\gmphr0w6rrpdhpbef.csv | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\48.wncryt | source_file_name = c:\users\dssdpmx042\documents\gpimnirm ch | True | 1 | | | | kjuih.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\49.wncryt | source_file_name = c:\users\dssdpmx042\documents\gpimnirm ch | False | 1 | | | | kjuih.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\gpimnirm chkjuih.xlsx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\49.wncryt | source_file_name = c:\users\dssdpmx042\documents\hemk7ngcvjg | True | 1 | | | | uirn6.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\50.wncryt | source_file_name = c:\users\dssdpmx042\documents\hemk7ngcvjg | False | 1 | | | | uirn6.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\hemk7ngcvjguirn6.xlsx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\50.wncryt | source_file_name = c:\users\dssdpmx042\documents\kqsfgiuuv7m | True | 1 | | | | acle5kbe.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\51.wncryt | source_file_name = c:\users\dssdpmx042\documents\kqsfgiuuv7m | False | 1 | | | | acle5kbe.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\kqsfgiuuv7macle5kbe.pptx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\51.wncryt | source_file_name = c:\users\dssdpmx042\documents\lsifcdcb6tb | True | 1 | | | | fbadh2jc.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\52.wncryt | source_file_name = c:\users\dssdpmx042\documents\lsifcdcb6tb | False | 1 | | | | fbadh2jc.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\lsifcdcb6tbfbadh2jc.pptx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\52.wncryt | source_file_name = c:\users\dssdpmx042\documents\lu6w3pxpu3c | True | 1 | | | | a.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\53.wncryt | source_file_name = c:\users\dssdpmx042\documents\lu6w3pxpu3c | False | 1 | | | | a.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\lu6w3pxpu3ca.xlsx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\53.wncryt | source_file_name = c:\users\dssdpmx042\documents\ly7o.pptx | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\54.wncryt | source_file_name = c:\users\dssdpmx042\documents\ly7o.pptx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\ly7o.pptx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\54.wncryt | source_file_name = c:\users\dssdpmx042\documents\qocbs.docx | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\55.wncryt | source_file_name = c:\users\dssdpmx042\documents\qocbs.docx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\qocbs.docx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\55.wncryt | source_file_name = c:\users\dssdpmx042\documents\tcrd9un1_my | True | 1 | | | | jq-.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\56.wncryt | source_file_name = c:\users\dssdpmx042\documents\tcrd9un1_my | False | 1 | | | | jq-.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\tcrd9un1_myjq-.pptx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\56.wncryt | source_file_name = c:\users\dssdpmx042\documents\wv7vnssgbfo | True | 1 | | | | dzvw.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\57.wncryt | source_file_name = c:\users\dssdpmx042\documents\wv7vnssgbfo | False | 1 | | | | dzvw.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\wv7vnssgbfodzvw.xlsx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\57.wncryt | source_file_name = c:\users\dssdpmx042\documents\yzoy0uk.ppt | True | 1 | | | | x | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\58.wncryt | source_file_name = c:\users\dssdpmx042\documents\yzoy0uk.ppt | False | 1 | | | | x | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\yzoy0uk.pptx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\58.wncryt | source_file_name = c:\users\dssdpmx042\documents\zwklqrq2nls | True | 1 | | | | ke44p.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\59.wncryt | source_file_name = c:\users\dssdpmx042\documents\zwklqrq2nls | False | 1 | | | | ke44p.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\zwklqrq2nlske44p.xlsx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\59.wncryt | source_file_name = c:\users\dssdpmx042\documents\_xgwdcsgf m | True | 1 | | | | jc6 j.docx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\60.wncryt | source_file_name = c:\users\dssdpmx042\documents\_xgwdcsgf m | False | 1 | | | | jc6 j.docx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\_xgwdcsgf mjc6 j.docx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\60.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\-nap | True | 1 | | | | .rtf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\61.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\-nap | False | 1 | | | | .rtf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\-nap.rtf | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\61.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\9o_u | True | 1 | | | | .pdf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\62.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\9o_u | False | 1 | | | | .pdf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\9o_u.pdf | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\62.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\k6fa | True | 1 | | | | dynloup1zicvtg0o.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\63.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\k6fa | False | 1 | | | | dynloup1zicvtg0o.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\k6fadynloup1zicvtg0o.xl | | True | 2 | | | sx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\63.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\p3k5 | True | 1 | | | | i8nny2aq5c.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\64.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\p3k5 | False | 1 | | | | i8nny2aq5c.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\p3k5i8nny2aq5c.pptx | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\64.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | True | 1 | | | | 3zhd03fzbccc\y5sy7wjt_a7krqnidgx.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\65.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | False | 1 | | | | 3zhd03fzbccc\y5sy7wjt_a7krqnidgx.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\y5sy7w | | True | 2 | | | jt_a7krqnidgx.xlsx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\65.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | True | 1 | | | | 3zhd03fzbccc\3e4ho\sbxkqajovxqwlt.csv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\66.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | False | 1 | | | | 3zhd03fzbccc\3e4ho\sbxkqajovxqwlt.csv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | | True | 2 | | | sbxkqajovxqwlt.csv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\66.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | | 9gef82k2wc1srgu\fxxfw-17sc6wh.ppt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\67.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\fxxfw-17sc6wh.ppt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\fxx | | True | 2 | | | fw-17sc6wh.ppt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\67.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | | 9gef82k2wc1srgu\vshy_qomhsb5w.ppt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\68.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\vshy_qomhsb5w.ppt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\vsh | | True | 2 | | | y_qomhsb5w.ppt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\68.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | | 9gef82k2wc1srgu\tedc-nspy xfvlw3\coafenjkmrn.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\69.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\tedc-nspy xfvlw3\coafenjkmrn.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | | True | 2 | | | c-nspy xfvlw3\coafenjkmrn.xlsx | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\69.wncryt | source_file_name = c:\users\dssdpmx042\documents\kqu8ojbhlzr | True | 1 | | | | .odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\70.wncryt | source_file_name = c:\users\dssdpmx042\documents\kqu8ojbhlzr | False | 1 | | | | .odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\kqu8ojbhlzr.odp | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\70.wncryt | source_file_name = c:\users\dssdpmx042\documents\qracrespeje | True | 1 | | | | u3.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\71.wncryt | source_file_name = c:\users\dssdpmx042\documents\qracrespeje | False | 1 | | | | u3.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\qracrespejeu3.ods | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\71.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\t9kb | True | 1 | | | | u.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\72.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\t9kb | False | 1 | | | | u.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\t9kbu.ots | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\72.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\uigp | True | 1 | | | | .odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\73.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\uigp | False | 1 | | | | .odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\uigp.odp | | True | 2 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\73.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | True | 1 | | | | 3zhd03fzbccc\v3b5lpgbpfe06xmrqjo.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\74.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | False | 1 | | | | 3zhd03fzbccc\v3b5lpgbpfe06xmrqjo.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\v3b5lp | | True | 2 | | | gbpfe06xmrqjo.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\74.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | True | 1 | | | | 3zhd03fzbccc\3e4ho\k_5vq4jhsw8guvo.odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\75.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | False | 1 | | | | 3zhd03fzbccc\3e4ho\k_5vq4jhsw8guvo.odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | | True | 2 | | | k_5vq4jhsw8guvo.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\75.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | True | 1 | | | | 3zhd03fzbccc\3e4ho\qbqa9 xzsel7xnah8.pps | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\76.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | False | 1 | | | | 3zhd03fzbccc\3e4ho\qbqa9 xzsel7xnah8.pps | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\j9gd3zhd03fzbccc\3e4ho\ | | True | 2 | | | qbqa9 xzsel7xnah8.pps | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\76.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | | 9gef82k2wc1srgu\bzrtj.pps | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\77.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\bzrtj.pps | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\bzr | | True | 2 | | | tj.pps | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\77.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | | 9gef82k2wc1srgu\lo4nczsaz.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\78.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\lo4nczsaz.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\lo4 | | True | 2 | | | nczsaz.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\78.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | | 9gef82k2wc1srgu\nqa-xbh.odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\79.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\nqa-xbh.odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\nqa | | True | 2 | | | -xbh.odp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\79.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | | 9gef82k2wc1srgu\tedc-nspy xfvlw3\-nos.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\80.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\tedc-nspy xfvlw3\-nos.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | | True | 2 | | | c-nspy xfvlw3\-nos.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\80.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | | 9gef82k2wc1srgu\tedc-nspy xfvlw3\axtg6ai5-.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\81.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\tedc-nspy xfvlw3\axtg6ai5-.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | | True | 2 | | | c-nspy xfvlw3\axtg6ai5-.ods | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\81.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | True | 1 | | | | 9gef82k2wc1srgu\tedc-nspy xfvlw3\qz1senichq4fy3oijrd.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\82.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\tedc-nspy xfvlw3\qz1senichq4fy3oijrd.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\documents\z-zdwb\kfd49gef82k2wc1srgu\ted | | True | 2 | | | c-nspy xfvlw3\qz1senichq4fy3oijrd.ots | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\82.wncryt | source_file_name = c:\users\all users\microsoft\windows nt\m | False | 1 | | | | sscan\welcomescan.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\83.wncryt | source_file_name = c:\users\all users\microsoft\windows nt\m | False | 1 | | | | sscan\welcomescan.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows nt\msscan\welcomescan.j | | False | 1 | | | pg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\83.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | | internet explorer\brndlog.txt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\84.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | False | 1 | | | | internet explorer\brndlog.txt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\internet explorer\b | | True | 1 | | | rndlog.txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\84.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | | windows mail\stationery\bears.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\85.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | False | 1 | | | | windows mail\stationery\bears.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | | True | 1 | | | nery\bears.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\85.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | | windows mail\stationery\garden.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\86.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | False | 1 | | | | windows mail\stationery\garden.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | | True | 1 | | | nery\garden.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\86.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | | windows mail\stationery\greenbubbles.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\87.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | False | 1 | | | | windows mail\stationery\greenbubbles.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | | True | 1 | | | nery\greenbubbles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\87.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | | windows mail\stationery\handprints.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\88.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | False | 1 | | | | windows mail\stationery\handprints.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | | True | 1 | | | nery\handprints.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\88.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | | windows mail\stationery\orangecircles.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\89.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | False | 1 | | | | windows mail\stationery\orangecircles.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | | True | 1 | | | nery\orangecircles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\89.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | | windows mail\stationery\peacock.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\90.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | False | 1 | | | | windows mail\stationery\peacock.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | | True | 1 | | | nery\peacock.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\90.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | | windows mail\stationery\roses.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\91.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | False | 1 | | | | windows mail\stationery\roses.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | | True | 1 | | | nery\roses.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\91.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | | windows mail\stationery\shadesofblue.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\92.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | False | 1 | | | | windows mail\stationery\shadesofblue.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | | True | 1 | | | nery\shadesofblue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\92.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | | windows mail\stationery\softblue.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\93.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | False | 1 | | | | windows mail\stationery\softblue.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | | True | 1 | | | nery\softblue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\93.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | | windows mail\stationery\stars.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\94.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | False | 1 | | | | windows mail\stationery\stars.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows mail\statio | | True | 1 | | | nery\stars.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\94.wncryt | source_file_name = c:\users\default\appdata\roaming\microsof | True | 1 | | | | t\windows\themes\transcodedwallpaper.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\95.wncryt | source_file_name = c:\users\default\appdata\roaming\microsof | False | 1 | | | | t\windows\themes\transcodedwallpaper.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\roaming\microsoft\windows\themes\tr | | True | 1 | | | anscodedwallpaper.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\95.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\internet explorer\brndlog.txt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\96.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\internet explorer\brndlog.txt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | | True | 1 | | | r\brndlog.txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\96.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows mail\stationery\bears.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\97.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows mail\stationery\bears.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | True | 1 | | | tionery\bears.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\97.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows mail\stationery\garden.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\98.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows mail\stationery\garden.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | True | 1 | | | tionery\garden.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\98.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows mail\stationery\greenbubbles.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\99.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows mail\stationery\greenbubbles.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | True | 1 | | | tionery\greenbubbles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\99.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows mail\stationery\handprints.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\100.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows mail\stationery\handprints.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | True | 1 | | | tionery\handprints.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\100.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows mail\stationery\orangecircles.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\101.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows mail\stationery\orangecircles.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | True | 1 | | | tionery\orangecircles.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\101.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows mail\stationery\peacock.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\102.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows mail\stationery\peacock.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | True | 1 | | | tionery\peacock.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\102.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows mail\stationery\roses.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\103.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows mail\stationery\roses.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | True | 1 | | | tionery\roses.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\103.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows mail\stationery\shadesofblue.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\104.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows mail\stationery\shadesofblue.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | True | 1 | | | tionery\shadesofblue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\104.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows mail\stationery\softblue.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\105.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows mail\stationery\softblue.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | True | 1 | | | tionery\softblue.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\105.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows mail\stationery\stars.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\106.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows mail\stationery\stars.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows mail\sta | | True | 1 | | | tionery\stars.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\106.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\d56ie | True | 1 | | | | .csv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\107.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\d56ie | False | 1 | | | | .csv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\d56ie.csv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\107.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\dx-rn | True | 1 | | | | sk.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\108.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\dx-rn | False | 1 | | | | sk.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\dx-rnsk.jpg | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\108.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\ir5ga | True | 1 | | | | ytbg.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\109.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\ir5ga | False | 1 | | | | ytbg.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\ir5gaytbg.jpg | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\109.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\mpx3v | True | 1 | | | | .xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\110.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\mpx3v | False | 1 | | | | .xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\mpx3v.xlsx | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\110.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\o7p_l | True | 1 | | | | .xls | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\111.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\o7p_l | False | 1 | | | | .xls | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\o7p_l.xls | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\111.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\ozq_q | True | 1 | | | | xmblgn17n.pdf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\112.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\ozq_q | False | 1 | | | | xmblgn17n.pdf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\ozq_qxmblgn17n.pdf | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\112.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\micro | True | 1 | | | | soft\windows\themes\transcodedwallpaper.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\113.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\micro | False | 1 | | | | soft\windows\themes\transcodedwallpaper.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\themes | | True | 1 | | | \transcodedwallpaper.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\113.wncryt | source_file_name = c:\users\dssdpmx042\desktop\bibagpmyuse2q | False | 1 | | | | jdfr.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\114.wncryt | source_file_name = c:\users\dssdpmx042\desktop\bibagpmyuse2q | False | 1 | | | | jdfr.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\114.wncryt | source_file_name = c:\users\dssdpmx042\desktop\h yrmf.docx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\115.wncryt | source_file_name = c:\users\dssdpmx042\desktop\h yrmf.docx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\115.wncryt | source_file_name = c:\users\dssdpmx042\desktop\hwef8jg56gk9d | False | 1 | | | | lonf.csv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\116.wncryt | source_file_name = c:\users\dssdpmx042\desktop\hwef8jg56gk9d | False | 1 | | | | lonf.csv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\116.wncryt | source_file_name = c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2 | False | 1 | | | | bnrt.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\117.wncryt | source_file_name = c:\users\dssdpmx042\desktop\lt4b3l1iwxyf2 | False | 1 | | | | bnrt.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\117.wncryt | source_file_name = c:\users\dssdpmx042\desktop\qb17mfblutnx_ | False | 1 | | | | jw3.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\118.wncryt | source_file_name = c:\users\dssdpmx042\desktop\qb17mfblutnx_ | False | 1 | | | | jw3.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\118.wncryt | source_file_name = c:\users\dssdpmx042\desktop\xirvpsv.pptx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\119.wncryt | source_file_name = c:\users\dssdpmx042\desktop\xirvpsv.pptx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\119.wncryt | source_file_name = c:\users\dssdpmx042\desktop\z89la7110x3is | False | 1 | | | | df6.doc | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\120.wncryt | source_file_name = c:\users\dssdpmx042\desktop\z89la7110x3is | False | 1 | | | | df6.doc | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\120.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\6pkpcf4uawtzg4xqlmdz.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\121.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\6pkpcf4uawtzg4xqlmdz.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\121.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\122.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\yluqbrq8d4aff5hp.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\122.wncryt | source_file_name = c:\users\dssdpmx042\documents\5dwumhpov0o | False | 1 | | | | nd.doc | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\123.wncryt | source_file_name = c:\users\dssdpmx042\documents\5dwumhpov0o | False | 1 | | | | nd.doc | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\123.wncryt | source_file_name = c:\users\dssdpmx042\documents\5pfcgtj7-40 | False | 1 | | | | fzu.docx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\124.wncryt | source_file_name = c:\users\dssdpmx042\documents\5pfcgtj7-40 | False | 1 | | | | fzu.docx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\124.wncryt | source_file_name = c:\users\dssdpmx042\documents\9c54.docx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\125.wncryt | source_file_name = c:\users\dssdpmx042\documents\9c54.docx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\125.wncryt | source_file_name = c:\users\dssdpmx042\documents\axmcb.docx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\126.wncryt | source_file_name = c:\users\dssdpmx042\documents\axmcb.docx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\126.wncryt | source_file_name = c:\users\dssdpmx042\documents\f8t0d1hl8mu | False | 1 | | | | lgw0ye.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\127.wncryt | source_file_name = c:\users\dssdpmx042\documents\f8t0d1hl8mu | False | 1 | | | | lgw0ye.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\127.wncryt | source_file_name = c:\users\dssdpmx042\documents\g9fp hftlrg | False | 1 | | | | z5w.xls | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\128.wncryt | source_file_name = c:\users\dssdpmx042\documents\g9fp hftlrg | False | 1 | | | | z5w.xls | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\128.wncryt | source_file_name = c:\users\dssdpmx042\documents\gmphr0w6rrp | False | 1 | | | | dhpbef.csv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\129.wncryt | source_file_name = c:\users\dssdpmx042\documents\gmphr0w6rrp | False | 1 | | | | dhpbef.csv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\129.wncryt | source_file_name = c:\users\dssdpmx042\documents\gpimnirm ch | False | 1 | | | | kjuih.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\130.wncryt | source_file_name = c:\users\dssdpmx042\documents\gpimnirm ch | False | 1 | | | | kjuih.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\130.wncryt | source_file_name = c:\users\dssdpmx042\documents\hemk7ngcvjg | False | 1 | | | | uirn6.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\131.wncryt | source_file_name = c:\users\dssdpmx042\documents\hemk7ngcvjg | False | 1 | | | | uirn6.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\131.wncryt | source_file_name = c:\users\dssdpmx042\documents\kqsfgiuuv7m | False | 1 | | | | acle5kbe.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\132.wncryt | source_file_name = c:\users\dssdpmx042\documents\kqsfgiuuv7m | False | 1 | | | | acle5kbe.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\132.wncryt | source_file_name = c:\users\dssdpmx042\documents\lsifcdcb6tb | False | 1 | | | | fbadh2jc.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\133.wncryt | source_file_name = c:\users\dssdpmx042\documents\lsifcdcb6tb | False | 1 | | | | fbadh2jc.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\133.wncryt | source_file_name = c:\users\dssdpmx042\documents\lu6w3pxpu3c | False | 1 | | | | a.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\134.wncryt | source_file_name = c:\users\dssdpmx042\documents\lu6w3pxpu3c | False | 1 | | | | a.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\134.wncryt | source_file_name = c:\users\dssdpmx042\documents\ly7o.pptx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\135.wncryt | source_file_name = c:\users\dssdpmx042\documents\ly7o.pptx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\135.wncryt | source_file_name = c:\users\dssdpmx042\documents\qocbs.docx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\136.wncryt | source_file_name = c:\users\dssdpmx042\documents\qocbs.docx | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\136.wncryt | source_file_name = c:\users\dssdpmx042\documents\tcrd9un1_my | False | 1 | | | | jq-.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\137.wncryt | source_file_name = c:\users\dssdpmx042\documents\tcrd9un1_my | False | 1 | | | | jq-.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\137.wncryt | source_file_name = c:\users\dssdpmx042\documents\wv7vnssgbfo | False | 1 | | | | dzvw.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\138.wncryt | source_file_name = c:\users\dssdpmx042\documents\wv7vnssgbfo | False | 1 | | | | dzvw.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\138.wncryt | source_file_name = c:\users\dssdpmx042\documents\yzoy0uk.ppt | False | 1 | | | | x | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\139.wncryt | source_file_name = c:\users\dssdpmx042\documents\yzoy0uk.ppt | False | 1 | | | | x | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\139.wncryt | source_file_name = c:\users\dssdpmx042\documents\zwklqrq2nls | False | 1 | | | | ke44p.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\140.wncryt | source_file_name = c:\users\dssdpmx042\documents\zwklqrq2nls | False | 1 | | | | ke44p.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\140.wncryt | source_file_name = c:\users\dssdpmx042\documents\_xgwdcsgf m | False | 1 | | | | jc6 j.docx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\141.wncryt | source_file_name = c:\users\dssdpmx042\documents\_xgwdcsgf m | False | 1 | | | | jc6 j.docx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\141.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\-nap | False | 1 | | | | .rtf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\142.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\-nap | False | 1 | | | | .rtf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\142.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\9o_u | False | 1 | | | | .pdf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\143.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\9o_u | False | 1 | | | | .pdf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\143.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\k6fa | False | 1 | | | | dynloup1zicvtg0o.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\144.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\k6fa | False | 1 | | | | dynloup1zicvtg0o.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\144.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\p3k5 | False | 1 | | | | i8nny2aq5c.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\145.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\p3k5 | False | 1 | | | | i8nny2aq5c.pptx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\145.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | False | 1 | | | | 3zhd03fzbccc\y5sy7wjt_a7krqnidgx.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\146.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | False | 1 | | | | 3zhd03fzbccc\y5sy7wjt_a7krqnidgx.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\146.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | False | 1 | | | | 3zhd03fzbccc\3e4ho\sbxkqajovxqwlt.csv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\147.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | False | 1 | | | | 3zhd03fzbccc\3e4ho\sbxkqajovxqwlt.csv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\147.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\fxxfw-17sc6wh.ppt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\148.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\fxxfw-17sc6wh.ppt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\148.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\vshy_qomhsb5w.ppt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\149.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\vshy_qomhsb5w.ppt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\149.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\tedc-nspy xfvlw3\coafenjkmrn.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\150.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\tedc-nspy xfvlw3\coafenjkmrn.xlsx | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\150.wncryt | source_file_name = c:\users\dssdpmx042\pictures\55woz240.jpg | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\151.wncryt | source_file_name = c:\users\dssdpmx042\pictures\55woz240.jpg | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\55woz240.jpg | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\151.wncryt | source_file_name = c:\users\dssdpmx042\pictures\j5lndpj\rely | True | 1 | | | | _w0.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\152.wncryt | source_file_name = c:\users\dssdpmx042\pictures\j5lndpj\rely | False | 1 | | | | _w0.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\j5lndpj\rely_w0.jpg | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\152.wncryt | source_file_name = c:\users\dssdpmx042\pictures\j5lndpj\txok | True | 1 | | | | dckrvk.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\153.wncryt | source_file_name = c:\users\dssdpmx042\pictures\j5lndpj\txok | False | 1 | | | | dckrvk.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\j5lndpj\txokdckrvk.jpg | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\153.wncryt | source_file_name = c:\users\dssdpmx042\pictures\jd8vsriczqxd | True | 1 | | | | x9vob\u0low_3k9h1go py7.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\154.wncryt | source_file_name = c:\users\dssdpmx042\pictures\jd8vsriczqxd | False | 1 | | | | x9vob\u0low_3k9h1go py7.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\u0low_3k9h1go | | True | 1 | | | py7.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\154.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | | hema\g7vbdhsavpjrp7\uvrcjvwuev0rc6u9m.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\155.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | False | 1 | | | | hema\g7vbdhsavpjrp7\uvrcjvwuev0rc6u9m.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | | True | 1 | | | \uvrcjvwuev0rc6u9m.jpg | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\155.wncryt | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\soyiw | True | 1 | | | | ozbtzrklfzgmav.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\156.wncryt | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\soyiw | False | 1 | | | | ozbtzrklfzgmav.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\_2hzdo\soyiwozbtzrklfzgmav.jpg | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\156.wncryt | source_file_name = c:\users\public\pictures\sample pictures\ | True | 1 | | | | chrysanthemum.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\157.wncryt | source_file_name = c:\users\public\pictures\sample pictures\ | False | 1 | | | | chrysanthemum.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\pictures\sample pictures\chrysanthemum.jpg | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\157.wncryt | source_file_name = c:\users\public\pictures\sample pictures\ | True | 1 | | | | desert.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\158.wncryt | source_file_name = c:\users\public\pictures\sample pictures\ | False | 1 | | | | desert.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\pictures\sample pictures\desert.jpg | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\158.wncryt | source_file_name = c:\users\public\pictures\sample pictures\ | True | 1 | | | | hydrangeas.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\159.wncryt | source_file_name = c:\users\public\pictures\sample pictures\ | False | 1 | | | | hydrangeas.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\pictures\sample pictures\hydrangeas.jpg | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\159.wncryt | source_file_name = c:\users\public\pictures\sample pictures\ | True | 1 | | | | jellyfish.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\160.wncryt | source_file_name = c:\users\public\pictures\sample pictures\ | False | 1 | | | | jellyfish.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\pictures\sample pictures\jellyfish.jpg | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\160.wncryt | source_file_name = c:\users\public\pictures\sample pictures\ | True | 1 | | | | koala.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\161.wncryt | source_file_name = c:\users\public\pictures\sample pictures\ | False | 1 | | | | koala.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\pictures\sample pictures\koala.jpg | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\161.wncryt | source_file_name = c:\users\public\pictures\sample pictures\ | True | 1 | | | | lighthouse.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\162.wncryt | source_file_name = c:\users\public\pictures\sample pictures\ | False | 1 | | | | lighthouse.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\pictures\sample pictures\lighthouse.jpg | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\162.wncryt | source_file_name = c:\users\public\pictures\sample pictures\ | True | 1 | | | | penguins.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\163.wncryt | source_file_name = c:\users\public\pictures\sample pictures\ | False | 1 | | | | penguins.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\pictures\sample pictures\penguins.jpg | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\163.wncryt | source_file_name = c:\users\public\pictures\sample pictures\ | True | 1 | | | | tulips.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\164.wncryt | source_file_name = c:\users\public\pictures\sample pictures\ | False | 1 | | | | tulips.jpg | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\pictures\sample pictures\tulips.jpg | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\164.wncryt | source_file_name = c:\bootsect.bak | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\165.wncryt | source_file_name = c:\bootsect.bak | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\bootsect.bak | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\165.wncryt | source_file_name = c:\users\all users\microsoft\device stage | False | 1 | | | | \device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.pn | | | | | | g | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\166.wncryt | source_file_name = c:\users\all users\microsoft\device stage | False | 1 | | | | \device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.pn | | | | | | g | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\device stage\device\{113527a4-4 | | False | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\background.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\166.wncryt | source_file_name = c:\users\all users\microsoft\device stage | False | 1 | | | | \device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\167.wncryt | source_file_name = c:\users\all users\microsoft\device stage | False | 1 | | | | \device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\device stage\device\{113527a4-4 | | False | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\device.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\167.wncryt | source_file_name = c:\users\all users\microsoft\device stage | False | 1 | | | | \device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\168.wncryt | source_file_name = c:\users\all users\microsoft\device stage | False | 1 | | | | \device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\device stage\device\{113527a4-4 | | False | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\overlay.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\168.wncryt | source_file_name = c:\users\all users\microsoft\device stage | False | 1 | | | | \device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\169.wncryt | source_file_name = c:\users\all users\microsoft\device stage | False | 1 | | | | \device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\device stage\device\{113527a4-4 | | False | 1 | | | 5d4-4b6f-b567-97838f1b04b0}\superbar.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\169.wncryt | source_file_name = c:\users\all users\microsoft\device stage | False | 1 | | | | \device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.pn | | | | | | g | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\170.wncryt | source_file_name = c:\users\all users\microsoft\device stage | False | 1 | | | | \device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.pn | | | | | | g | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\device stage\device\{8702d817-5 | | False | 1 | | | aad-4674-9ef3-4d3decd87120}\background.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\170.wncryt | source_file_name = c:\users\all users\microsoft\device stage | False | 1 | | | | \device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\171.wncryt | source_file_name = c:\users\all users\microsoft\device stage | False | 1 | | | | \device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\device stage\device\{8702d817-5 | | False | 1 | | | aad-4674-9ef3-4d3decd87120}\watermark.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\171.wncryt | source_file_name = c:\users\all users\microsoft\search\data\ | True | 1 | | | | applications\windows\windows.edb | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\172.wncryt | source_file_name = c:\users\all users\microsoft\search\data\ | False | 1 | | | | applications\windows\windows.edb | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\search\data\applications\window | | True | 1 | | | s\windows.edb | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\172.wncryt | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | | pictures\guest.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\173.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\guest.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\guest.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\173.wncryt | source_file_name = c:\users\all users\microsoft\user account | True | 1 | | | | pictures\user.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\174.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\user.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\user.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\174.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile10.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\175.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile10.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile10.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\175.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile11.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\176.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile11.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile11.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\176.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile12.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\177.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile12.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile12.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\177.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile13.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\178.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile13.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile13.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\178.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile14.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\179.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile14.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile14.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\179.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile15.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\180.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile15.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile15.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\180.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile16.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\181.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile16.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile16.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\181.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile17.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\182.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile17.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile17.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\182.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile18.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\183.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile18.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile18.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\183.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile19.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\184.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile19.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile19.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\184.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile20.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\185.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile20.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile20.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\185.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile21.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\186.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile21.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile21.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\186.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile22.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\187.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile22.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile22.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\187.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile23.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\188.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile23.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile23.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\188.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile24.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\189.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile24.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile24.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\189.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile25.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\190.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile25.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile25.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\190.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile26.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\191.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile26.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile26.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\191.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile27.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\192.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile27.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile27.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\192.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile28.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\193.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile28.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile28.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\193.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile29.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\194.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile29.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile29.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\194.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile30.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\195.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile30.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile30.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\195.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile31.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\196.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile31.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile31.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\196.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile32.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\197.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile32.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile32.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\197.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile33.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\198.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile33.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile33.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\198.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile34.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\199.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile34.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile34.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\199.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile35.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\200.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile35.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile35.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\200.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile36.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\201.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile36.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile36.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\201.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile37.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\202.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile37.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile37.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\202.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile38.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\203.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile38.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile38.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\203.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile39.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\204.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile39.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile39.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\204.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile40.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\205.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile40.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile40.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\205.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile41.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\206.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile41.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile41.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\206.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile42.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\207.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile42.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile42.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\207.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile43.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\208.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile43.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile43.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\208.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile44.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\209.wncryt | source_file_name = c:\users\all users\microsoft\user account | False | 1 | | | | pictures\default pictures\usertile44.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\user account pictures\default p | | False | 1 | | | ictures\usertile44.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\209.wncryt | source_file_name = c:\users\all users\microsoft\windows\cach | True | 1 | | | | es\cversions.2.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\210.wncryt | source_file_name = c:\users\all users\microsoft\windows\cach | False | 1 | | | | es\cversions.2.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\caches\cversions.2.db | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\210.wncryt | source_file_name = c:\users\all users\microsoft\windows\cach | True | 1 | | | | es\{67d69890-d853-4011-a87e-aa64fa83ce5a}.2.ver0x00000000000 | | | | | | 00002.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\211.wncryt | source_file_name = c:\users\all users\microsoft\windows\cach | False | 1 | | | | es\{67d69890-d853-4011-a87e-aa64fa83ce5a}.2.ver0x00000000000 | | | | | | 00002.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\caches\{67d69890-d853-4 | | True | 1 | | | 011-a87e-aa64fa83ce5a}.2.ver0x0000000000000002.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\211.wncryt | source_file_name = c:\users\all users\microsoft\windows\cach | True | 1 | | | | es\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x00000000000 | | | | | | 00004.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\212.wncryt | source_file_name = c:\users\all users\microsoft\windows\cach | False | 1 | | | | es\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x00000000000 | | | | | | 00004.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000004.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\212.wncryt | source_file_name = c:\users\all users\microsoft\windows\cach | True | 1 | | | | es\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x00000000000 | | | | | | 00005.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\213.wncryt | source_file_name = c:\users\all users\microsoft\windows\cach | False | 1 | | | | es\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x00000000000 | | | | | | 00005.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\213.wncryt | source_file_name = c:\users\all users\microsoft\windows\cach | True | 1 | | | | es\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x00000000000 | | | | | | 00006.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\214.wncryt | source_file_name = c:\users\all users\microsoft\windows\cach | False | 1 | | | | es\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x00000000000 | | | | | | 00006.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000006.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\214.wncryt | source_file_name = c:\users\all users\microsoft\windows\cach | True | 1 | | | | es\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x00000000000 | | | | | | 00007.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\215.wncryt | source_file_name = c:\users\all users\microsoft\windows\cach | False | 1 | | | | es\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x00000000000 | | | | | | 00007.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\caches\{6af0698e-d558-4 | | True | 1 | | | f6e-9b3c-3716689af493}.2.ver0x0000000000000007.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\215.wncryt | source_file_name = c:\users\all users\microsoft\windows\cach | True | 1 | | | | es\{7cd55808-3d38-4dd5-90c9-62f0e6ee60d4}.2.ver0x00000000000 | | | | | | 00001.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\216.wncryt | source_file_name = c:\users\all users\microsoft\windows\cach | False | 1 | | | | es\{7cd55808-3d38-4dd5-90c9-62f0e6ee60d4}.2.ver0x00000000000 | | | | | | 00001.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\caches\{7cd55808-3d38-4 | | True | 1 | | | dd5-90c9-62f0e6ee60d4}.2.ver0x0000000000000001.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\216.wncryt | source_file_name = c:\users\all users\microsoft\windows\cach | True | 1 | | | | es\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x00000000000 | | | | | | 00002.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\217.wncryt | source_file_name = c:\users\all users\microsoft\windows\cach | False | 1 | | | | es\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x00000000000 | | | | | | 00002.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\caches\{ddf571f2-be98-4 | | True | 1 | | | 26d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\217.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | | tones\ringtone 01.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\218.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | False | 1 | | | | tones\ringtone 01.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 01.w | | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\218.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | | tones\ringtone 02.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\219.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | False | 1 | | | | tones\ringtone 02.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 02.w | | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\219.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | | tones\ringtone 03.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\220.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | False | 1 | | | | tones\ringtone 03.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 03.w | | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\220.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | | tones\ringtone 04.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\221.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | False | 1 | | | | tones\ringtone 04.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 04.w | | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\221.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | | tones\ringtone 05.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\222.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | False | 1 | | | | tones\ringtone 05.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 05.w | | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\222.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | | tones\ringtone 06.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\223.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | False | 1 | | | | tones\ringtone 06.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 06.w | | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\223.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | | tones\ringtone 07.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\224.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | False | 1 | | | | tones\ringtone 07.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 07.w | | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\224.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | | tones\ringtone 08.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\225.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | False | 1 | | | | tones\ringtone 08.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 08.w | | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\225.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | | tones\ringtone 09.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\226.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | False | 1 | | | | tones\ringtone 09.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 09.w | | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\226.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | True | 1 | | | | tones\ringtone 10.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\227.wncryt | source_file_name = c:\users\all users\microsoft\windows\ring | False | 1 | | | | tones\ringtone 10.wma | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows\ringtones\ringtone 10.w | | True | 1 | | | ma | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\227.wncryt | source_file_name = c:\users\all users\microsoft\windows nt\m | False | 1 | | | | sfax\virtualinbox\en-us\welcomefax.tif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\228.wncryt | source_file_name = c:\users\all users\microsoft\windows nt\m | False | 1 | | | | sfax\virtualinbox\en-us\welcomefax.tif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\all users\microsoft\windows nt\msfax\virtualinbox\e | | False | 1 | | | n-us\welcomefax.tif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\228.wncryt | source_file_name = c:\users\default\appdata\local\iconcache. | True | 1 | | | | db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\229.wncryt | source_file_name = c:\users\default\appdata\local\iconcache. | False | 1 | | | | db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\iconcache.db | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\229.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | | windows\explorer\thumbcache_256.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\230.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | False | 1 | | | | windows\explorer\thumbcache_256.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows\explorer\th | | True | 1 | | | umbcache_256.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\230.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | | windows\explorer\thumbcache_idx.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\231.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | False | 1 | | | | windows\explorer\thumbcache_idx.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows\explorer\th | | True | 1 | | | umbcache_idx.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\231.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\iconcac | True | 1 | | | | he.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\232.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\iconcac | False | 1 | | | | he.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\iconcache.db | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\232.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\internet explorer\brndlog.bak | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\233.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\internet explorer\brndlog.bak | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\internet explore | | True | 1 | | | r\brndlog.bak | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\233.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows\caches\cversions.1.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\234.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows\caches\cversions.1.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\c | | True | 1 | | | versions.1.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\234.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows\caches\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.v | | | | | | er0x000000000000000f.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\235.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows\caches\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.v | | | | | | er0x000000000000000f.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | | True | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000 | | | | | | f.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\235.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows\caches\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.v | | | | | | er0x0000000000000010.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\236.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows\caches\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.v | | | | | | er0x0000000000000010.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows\caches\{ | | True | 1 | | | afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001 | | | | | | 0.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\236.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows\explorer\thumbcache_256.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\237.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows\explorer\thumbcache_256.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | | True | 1 | | | \thumbcache_256.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\237.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows\explorer\thumbcache_32.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\238.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows\explorer\thumbcache_32.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | | True | 2 | | | \thumbcache_32.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\238.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows\explorer\thumbcache_96.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\239.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows\explorer\thumbcache_96.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | | True | 1 | | | \thumbcache_96.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\239.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows\explorer\thumbcache_idx.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\240.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows\explorer\thumbcache_idx.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | | True | 1 | | | \thumbcache_idx.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\240.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\bp7n0 | True | 1 | | | | _qwtwkorxg.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\241.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\bp7n0 | False | 1 | | | | _qwtwkorxg.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\bp7n0_qwtwkorxg.mp3 | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\241.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\bywi0 | True | 1 | | | | qluwl3w9bud5f3o.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\242.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\bywi0 | False | 1 | | | | qluwl3w9bud5f3o.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\bywi0qluwl3w9bud5f3o.gif | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\242.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\dayij | True | 1 | | | | 9-o1e8.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\243.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\dayij | False | 1 | | | | 9-o1e8.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\dayij9-o1e8.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\243.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\dhlst | True | 1 | | | | wctu20.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\244.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\dhlst | False | 1 | | | | wctu20.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\dhlstwctu20.swf | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\244.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\djlkl | True | 1 | | | | pzvvty.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\245.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\djlkl | False | 1 | | | | pzvvty.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\djlklpzvvty.swf | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\245.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\dz0vp | True | 1 | | | | tp5owvhzt.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\246.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\dz0vp | False | 1 | | | | tp5owvhzt.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\dz0vptp5owvhzt.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\246.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\g2kjj | True | 1 | | | | oggr_cgbs8b.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\247.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\g2kjj | False | 1 | | | | oggr_cgbs8b.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\g2kjjoggr_cgbs8b.flv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\247.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\g_iap | True | 1 | | | | -kg5-s.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\248.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\g_iap | False | 1 | | | | -kg5-s.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\g_iap-kg5-s.wav | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\248.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\jqzjf | True | 1 | | | | 0k.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\249.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\jqzjf | False | 1 | | | | 0k.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\jqzjf0k.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\249.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\mhjvg | True | 1 | | | | 24dofm.pps | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\250.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\mhjvg | False | 1 | | | | 24dofm.pps | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\mhjvg24dofm.pps | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\250.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\nrae. | True | 1 | | | | png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\251.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\nrae. | False | 1 | | | | png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\nrae.png | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\251.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\o8fcd | True | 1 | | | | dpbkgpe-.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\252.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\o8fcd | False | 1 | | | | dpbkgpe-.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\o8fcddpbkgpe-.swf | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\252.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\ojefr | True | 1 | | | | 7lfa6sgok2mjmm.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\253.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\ojefr | False | 1 | | | | 7lfa6sgok2mjmm.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\ojefr7lfa6sgok2mjmm.mp3 | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\253.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\orfn2 | True | 1 | | | | vwitjww5.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\254.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\orfn2 | False | 1 | | | | vwitjww5.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\orfn2vwitjww5.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\254.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\ph1dz | True | 1 | | | | o_.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\255.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\ph1dz | False | 1 | | | | o_.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\ph1dzo_.png | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\255.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\qq1a2 | True | 1 | | | | p8piiy_edbcli.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\256.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\qq1a2 | False | 1 | | | | p8piiy_edbcli.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\qq1a2p8piiy_edbcli.mkv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\256.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\qwg2c | True | 1 | | | | vfqc9ez1jca.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\257.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\qwg2c | False | 1 | | | | vfqc9ez1jca.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\qwg2cvfqc9ez1jca.mp3 | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\257.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\ra-n6 | True | 1 | | | | lubasx5.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\258.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\ra-n6 | False | 1 | | | | lubasx5.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\ra-n6lubasx5.swf | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\258.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\rjwem | True | 1 | | | | .avi | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\259.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\rjwem | False | 1 | | | | .avi | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\rjwem.avi | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\259.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\sh5e3 | True | 1 | | | | mmjvux.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\260.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\sh5e3 | False | 1 | | | | mmjvux.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\sh5e3mmjvux.mkv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\260.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\sl9er | True | 1 | | | | sroh9zeq.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\261.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\sl9er | False | 1 | | | | sroh9zeq.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\sl9ersroh9zeq.png | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\261.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\uaebz | True | 1 | | | | geiegneodnlxncn.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\262.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\uaebz | False | 1 | | | | geiegneodnlxncn.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\uaebzgeiegneodnlxncn.mkv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\262.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\ultbj | True | 1 | | | | g f.pps | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\263.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\ultbj | False | 1 | | | | g f.pps | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\ultbjg f.pps | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\263.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\uywba | True | 1 | | | | 9uh15vmu3etzhh-.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\264.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\uywba | False | 1 | | | | 9uh15vmu3etzhh-.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\uywba9uh15vmu3etzhh-.mkv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\264.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\vsm1c | True | 1 | | | | rhdjx95vtws.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\265.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\vsm1c | False | 1 | | | | rhdjx95vtws.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\vsm1crhdjx95vtws.flv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\265.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\wgxrl | True | 1 | | | | 2.odt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\266.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\wgxrl | False | 1 | | | | 2.odt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\wgxrl2.odt | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\266.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\xdsqx | True | 1 | | | | _wxf9k9q.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\267.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\xdsqx | False | 1 | | | | _wxf9k9q.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\xdsqx_wxf9k9q.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\267.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\xf1j6 | True | 1 | | | | kjktjpo ac8gr6.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\268.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\xf1j6 | False | 1 | | | | kjktjpo ac8gr6.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\xf1j6kjktjpo ac8gr6.ots | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\268.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\zmej2 | True | 1 | | | | xz6d3on_bh9gk7g.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\269.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\zmej2 | False | 1 | | | | xz6d3on_bh9gk7g.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\zmej2xz6d3on_bh9gk7g.wav | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\269.wncryt | source_file_name = c:\users\dssdpmx042\desktop\3kmod_2d6ued. | False | 1 | | | | swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\270.wncryt | source_file_name = c:\users\dssdpmx042\desktop\3kmod_2d6ued. | False | 1 | | | | swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\270.wncryt | source_file_name = c:\users\dssdpmx042\desktop\acndlsz4zhbdy | False | 1 | | | | ziqkotj.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\271.wncryt | source_file_name = c:\users\dssdpmx042\desktop\acndlsz4zhbdy | False | 1 | | | | ziqkotj.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\271.wncryt | source_file_name = c:\users\dssdpmx042\desktop\ajkh5gnvfe8rq | False | 1 | | | | zavym.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\272.wncryt | source_file_name = c:\users\dssdpmx042\desktop\ajkh5gnvfe8rq | False | 1 | | | | zavym.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\272.wncryt | source_file_name = c:\users\dssdpmx042\desktop\blw7.png | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\273.wncryt | source_file_name = c:\users\dssdpmx042\desktop\blw7.png | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\273.wncryt | source_file_name = c:\users\dssdpmx042\desktop\c9dt7ht6ochw_ | False | 1 | | | | r.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\274.wncryt | source_file_name = c:\users\dssdpmx042\desktop\c9dt7ht6ochw_ | False | 1 | | | | r.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\274.wncryt | source_file_name = c:\users\dssdpmx042\desktop\fycbs5cumf6dh | False | 1 | | | | _fs.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\275.wncryt | source_file_name = c:\users\dssdpmx042\desktop\fycbs5cumf6dh | False | 1 | | | | _fs.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\275.wncryt | source_file_name = c:\users\dssdpmx042\desktop\gfs3quzvztmy- | False | 1 | | | | jq6xox.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\276.wncryt | source_file_name = c:\users\dssdpmx042\desktop\gfs3quzvztmy- | False | 1 | | | | jq6xox.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\276.wncryt | source_file_name = c:\users\dssdpmx042\desktop\h4mzf.bmp | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\277.wncryt | source_file_name = c:\users\dssdpmx042\desktop\h4mzf.bmp | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\277.wncryt | source_file_name = c:\users\dssdpmx042\desktop\hyxaas7ppqlng | False | 1 | | | | g5ir6.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\278.wncryt | source_file_name = c:\users\dssdpmx042\desktop\hyxaas7ppqlng | False | 1 | | | | g5ir6.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\278.wncryt | source_file_name = c:\users\dssdpmx042\desktop\kit3qjluq u1e | False | 1 | | | | hoy.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\279.wncryt | source_file_name = c:\users\dssdpmx042\desktop\kit3qjluq u1e | False | 1 | | | | hoy.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\279.wncryt | source_file_name = c:\users\dssdpmx042\desktop\lkwb.wav | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\280.wncryt | source_file_name = c:\users\dssdpmx042\desktop\lkwb.wav | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\280.wncryt | source_file_name = c:\users\dssdpmx042\desktop\m-flkfw.pps | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\281.wncryt | source_file_name = c:\users\dssdpmx042\desktop\m-flkfw.pps | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\281.wncryt | source_file_name = c:\users\dssdpmx042\desktop\p6tg4g.bmp | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\282.wncryt | source_file_name = c:\users\dssdpmx042\desktop\p6tg4g.bmp | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\282.wncryt | source_file_name = c:\users\dssdpmx042\desktop\ytaj9x8n5wxoj | False | 1 | | | | mujtmi.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\283.wncryt | source_file_name = c:\users\dssdpmx042\desktop\ytaj9x8n5wxoj | False | 1 | | | | mujtmi.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\283.wncryt | source_file_name = c:\users\dssdpmx042\desktop\zb1nbq.mp4 | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\284.wncryt | source_file_name = c:\users\dssdpmx042\desktop\zb1nbq.mp4 | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\284.wncryt | source_file_name = c:\users\dssdpmx042\desktop\zu3ocp3f88cn. | False | 1 | | | | flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\285.wncryt | source_file_name = c:\users\dssdpmx042\desktop\zu3ocp3f88cn. | False | 1 | | | | flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\285.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\- jmajpm5_rro.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\286.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\- jmajpm5_rro.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\286.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\mf1nbo.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\287.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\mf1nbo.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\287.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\0qdvmg\kslni5puyuj.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\288.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\0qdvmg\kslni5puyuj.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\288.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\0qdvmg\ntjkr9csa.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\289.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\0qdvmg\ntjkr9csa.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\289.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\0qdvmg\nxds miu.odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\290.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\0qdvmg\nxds miu.odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\290.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\k8vahpvastg\2h9gjyzxutjtaj vlt76.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\291.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\k8vahpvastg\2h9gjyzxutjtaj vlt76.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\291.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\k8vahpvastg\9wcvzyuqncphgsqczkn.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\292.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\k8vahpvastg\9wcvzyuqncphgsqczkn.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\292.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\k8vahpvastg\kpyogarb2ozckx549d.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\293.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\k8vahpvastg\kpyogarb2ozckx549d.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\293.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\k8vahpvastg\z8mf4.avi | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\294.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\k8vahpvastg\z8mf4.avi | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\294.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\tey_zyonktol5ojrt0io.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\295.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\tey_zyonktol5ojrt0io.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\295.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\296.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\46ix9df9_1lvnwsx.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\296.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\93pm.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\297.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\93pm.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\297.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\cxy8v.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\298.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\cxy8v.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\298.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bm | | | | | | p | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\299.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\xmeixq lmabg-zgr7mpc.bm | | | | | | p | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\299.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\yg84pi.avi | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\300.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\yg84pi.avi | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\300.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\yoo37jp7q.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\301.wncryt | source_file_name = c:\users\dssdpmx042\desktop\pgm8zh2abxrdy | False | 1 | | | | c7agszx\lsxsfgzrgx3ysj1\2tpofaj-rucn\yoo37jp7q.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\301.wncryt | source_file_name = c:\users\dssdpmx042\documents\kqu8ojbhlzr | False | 1 | | | | .odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\302.wncryt | source_file_name = c:\users\dssdpmx042\documents\kqu8ojbhlzr | False | 1 | | | | .odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\302.wncryt | source_file_name = c:\users\dssdpmx042\documents\qracrespeje | False | 1 | | | | u3.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\303.wncryt | source_file_name = c:\users\dssdpmx042\documents\qracrespeje | False | 1 | | | | u3.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\303.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\t9kb | False | 1 | | | | u.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\304.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\t9kb | False | 1 | | | | u.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\304.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\uigp | False | 1 | | | | .odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\305.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\uigp | False | 1 | | | | .odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\305.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | False | 1 | | | | 3zhd03fzbccc\v3b5lpgbpfe06xmrqjo.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\306.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | False | 1 | | | | 3zhd03fzbccc\v3b5lpgbpfe06xmrqjo.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\306.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | False | 1 | | | | 3zhd03fzbccc\3e4ho\k_5vq4jhsw8guvo.odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\307.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | False | 1 | | | | 3zhd03fzbccc\3e4ho\k_5vq4jhsw8guvo.odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\307.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | False | 1 | | | | 3zhd03fzbccc\3e4ho\qbqa9 xzsel7xnah8.pps | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\308.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\j9gd | False | 1 | | | | 3zhd03fzbccc\3e4ho\qbqa9 xzsel7xnah8.pps | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\308.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\bzrtj.pps | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\309.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\bzrtj.pps | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\309.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\lo4nczsaz.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\310.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\lo4nczsaz.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\310.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\nqa-xbh.odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\311.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\nqa-xbh.odp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\311.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\tedc-nspy xfvlw3\-nos.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\312.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\tedc-nspy xfvlw3\-nos.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\312.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\tedc-nspy xfvlw3\axtg6ai5-.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\313.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\tedc-nspy xfvlw3\axtg6ai5-.ods | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\313.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\tedc-nspy xfvlw3\qz1senichq4fy3oijrd.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\314.wncryt | source_file_name = c:\users\dssdpmx042\documents\z-zdwb\kfd4 | False | 1 | | | | 9gef82k2wc1srgu\tedc-nspy xfvlw3\qz1senichq4fy3oijrd.ots | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\314.wncryt | source_file_name = c:\users\dssdpmx042\music\dfkh.wav | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\315.wncryt | source_file_name = c:\users\dssdpmx042\music\dfkh.wav | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\dfkh.wav | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\315.wncryt | source_file_name = c:\users\dssdpmx042\music\hmdiztpptjk3.wa | True | 1 | | | | v | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\316.wncryt | source_file_name = c:\users\dssdpmx042\music\hmdiztpptjk3.wa | False | 1 | | | | v | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\hmdiztpptjk3.wav | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\316.wncryt | source_file_name = c:\users\dssdpmx042\music\zptabq.mp3 | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\317.wncryt | source_file_name = c:\users\dssdpmx042\music\zptabq.mp3 | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\zptabq.mp3 | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\317.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\lk- | True | 1 | | | | vjlkc3mbxebkrauk.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\318.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\lk- | False | 1 | | | | vjlkc3mbxebkrauk.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\lk-vjlkc3mbxebkrauk.wa | | True | 1 | | | v | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\318.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\fqn | True | 1 | | | | e\9 bxr.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\319.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\fqn | False | 1 | | | | e\9 bxr.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\9 bxr.wav | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\319.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\fqn | True | 1 | | | | e\bm1lj1elmahv.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\320.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\fqn | False | 1 | | | | e\bm1lj1elmahv.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\bm1lj1elmahv.wav | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\320.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\fqn | True | 1 | | | | e\hwq_e63aib.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\321.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\fqn | False | 1 | | | | e\hwq_e63aib.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\hwq_e63aib.wav | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\321.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\fqn | True | 1 | | | | e\qni_.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\322.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\fqn | False | 1 | | | | e\qni_.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\qni_.mp3 | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\322.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\fqn | True | 1 | | | | e\zhvacu3zm4pi0lqv.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\323.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\fqn | False | 1 | | | | e\zhvacu3zm4pi0lqv.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\fqne\zhvacu3zm4pi0lqv. | | True | 1 | | | mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\323.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\gzf | True | 1 | | | | r8pq\0qrd5fx.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\324.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\gzf | False | 1 | | | | r8pq\0qrd5fx.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\0qrd5fx.mp3 | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\324.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\gzf | True | 1 | | | | r8pq\vox09umk.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\325.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\gzf | False | 1 | | | | r8pq\vox09umk.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\gzfr8pq\vox09umk.mp3 | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\325.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | | j\2reugw.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\326.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | False | 1 | | | | j\2reugw.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\2reugw.wav | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\326.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | | j\4sarhcvjd04q.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\327.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | False | 1 | | | | j\4sarhcvjd04q.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\4sarhcvjd04q.mp3 | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\327.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | | j\9z_ehnks.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\328.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | False | 1 | | | | j\9z_ehnks.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\9z_ehnks.wav | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\328.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | | j\c5alotv4.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\329.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | False | 1 | | | | j\c5alotv4.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\c5alotv4.wav | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\329.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | | j\kfqjlmnelq.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\330.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | False | 1 | | | | j\kfqjlmnelq.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\kfqjlmnelq.mp3 | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\330.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | | j\mlx4g8dg4dbcwao4.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\331.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | False | 1 | | | | j\mlx4g8dg4dbcwao4.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\mlx4g8dg4dbcwao4. | | True | 1 | | | wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\331.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | | j\0-sd9l8u\dji4emfcxz9.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\332.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | False | 1 | | | | j\0-sd9l8u\dji4emfcxz9.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\0-sd9l8u\dji4emfc | | True | 1 | | | xz9.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\332.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | | j\r4lsao\csxh-dp0pzvfbfnnd.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\333.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | False | 1 | | | | j\r4lsao\csxh-dp0pzvfbfnnd.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\r4lsao\csxh-dp0pz | | True | 1 | | | vfbfnnd.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\333.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | | j\zhuw0ma_qhqt\gi9ip_csel.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\334.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | False | 1 | | | | j\zhuw0ma_qhqt\gi9ip_csel.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\gi9i | | True | 1 | | | p_csel.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\334.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | | j\zhuw0ma_qhqt\s9_2q.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\335.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | False | 1 | | | | j\zhuw0ma_qhqt\s9_2q.wav | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\s9_2 | | True | 1 | | | q.wav | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\335.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | True | 1 | | | | j\zhuw0ma_qhqt\xyscfw4.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\336.wncryt | source_file_name = c:\users\dssdpmx042\music\ipzul2xxs j\hiw | False | 1 | | | | j\zhuw0ma_qhqt\xyscfw4.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\music\ipzul2xxs j\hiwj\zhuw0ma_qhqt\xysc | | True | 1 | | | fw4.mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\336.wncryt | source_file_name = c:\users\dssdpmx042\pictures\aicirck.gif | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\337.wncryt | source_file_name = c:\users\dssdpmx042\pictures\aicirck.gif | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\aicirck.gif | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\337.wncryt | source_file_name = c:\users\dssdpmx042\pictures\drba.bmp | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\338.wncryt | source_file_name = c:\users\dssdpmx042\pictures\drba.bmp | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\drba.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\338.wncryt | source_file_name = c:\users\dssdpmx042\pictures\eszy hkfdwfx | True | 1 | | | | 0.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\339.wncryt | source_file_name = c:\users\dssdpmx042\pictures\eszy hkfdwfx | False | 1 | | | | 0.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\eszy hkfdwfx0.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\339.wncryt | source_file_name = c:\users\dssdpmx042\pictures\imjwbtsshxgl | True | 1 | | | | oi.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\340.wncryt | source_file_name = c:\users\dssdpmx042\pictures\imjwbtsshxgl | False | 1 | | | | oi.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\imjwbtsshxgloi.gif | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\340.wncryt | source_file_name = c:\users\dssdpmx042\pictures\n5vvg0h1npv. | True | 1 | | | | bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\341.wncryt | source_file_name = c:\users\dssdpmx042\pictures\n5vvg0h1npv. | False | 1 | | | | bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\n5vvg0h1npv.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\341.wncryt | source_file_name = c:\users\dssdpmx042\pictures\pwvh0sxs 4u. | True | 1 | | | | gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\342.wncryt | source_file_name = c:\users\dssdpmx042\pictures\pwvh0sxs 4u. | False | 1 | | | | gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\pwvh0sxs 4u.gif | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\342.wncryt | source_file_name = c:\users\dssdpmx042\pictures\r9tluytrypiq | True | 1 | | | | hwf.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\343.wncryt | source_file_name = c:\users\dssdpmx042\pictures\r9tluytrypiq | False | 1 | | | | hwf.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\r9tluytrypiqhwf.gif | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\343.wncryt | source_file_name = c:\users\dssdpmx042\pictures\_y79.bmp | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\344.wncryt | source_file_name = c:\users\dssdpmx042\pictures\_y79.bmp | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\_y79.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\344.wncryt | source_file_name = c:\users\dssdpmx042\pictures\j5lndpj\5he- | True | 1 | | | | bihy791udb060xb.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\345.wncryt | source_file_name = c:\users\dssdpmx042\pictures\j5lndpj\5he- | False | 1 | | | | bihy791udb060xb.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\j5lndpj\5he-bihy791udb060xb.gif | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\345.wncryt | source_file_name = c:\users\dssdpmx042\pictures\j5lndpj\jgg9 | True | 1 | | | | piy6c.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\346.wncryt | source_file_name = c:\users\dssdpmx042\pictures\j5lndpj\jgg9 | False | 1 | | | | piy6c.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\j5lndpj\jgg9piy6c.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\346.wncryt | source_file_name = c:\users\dssdpmx042\pictures\jd8vsriczqxd | True | 1 | | | | x9vob\4r2l.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\347.wncryt | source_file_name = c:\users\dssdpmx042\pictures\jd8vsriczqxd | False | 1 | | | | x9vob\4r2l.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\4r2l.png | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\347.wncryt | source_file_name = c:\users\dssdpmx042\pictures\jd8vsriczqxd | True | 1 | | | | x9vob\wosctyozygi-.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\348.wncryt | source_file_name = c:\users\dssdpmx042\pictures\jd8vsriczqxd | False | 1 | | | | x9vob\wosctyozygi-.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\jd8vsriczqxdx9vob\wosctyozygi-. | | True | 1 | | | png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\348.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\d0i | True | 1 | | | | fk_s5cqbrv.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\349.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\d0i | False | 1 | | | | fk_s5cqbrv.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\d0ifk_s5cqbrv.png | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\349.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\h p | True | 1 | | | | gorp n6u.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\350.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\h p | False | 1 | | | | gorp n6u.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\h pgorp n6u.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\350.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\rgf | True | 1 | | | | jlx032dp7.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\351.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\rgf | False | 1 | | | | jlx032dp7.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\rgfjlx032dp7.gif | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\351.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\wu4 | True | 1 | | | | tbykxf6k0p.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\352.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\wu4 | False | 1 | | | | tbykxf6k0p.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\wu4tbykxf6k0p.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\352.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\xqj | True | 1 | | | | 6y5vsd79ypdjyjlfn.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\353.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\xqj | False | 1 | | | | 6y5vsd79ypdjyjlfn.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\xqj6y5vsd79ypdjyjlfn.p | | True | 1 | | | ng | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\353.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\zlp | True | 1 | | | | vbnitdrc.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\354.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\zlp | False | 1 | | | | vbnitdrc.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\zlpvbnitdrc.png | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\354.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\_nm | True | 1 | | | | licbf8j8nqyjj7kp.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\355.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\_nm | False | 1 | | | | licbf8j8nqyjj7kp.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\_nmlicbf8j8nqyjj7kp.bm | | True | 1 | | | p | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\355.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | | hema\2bzr.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\356.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | False | 1 | | | | hema\2bzr.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\2bzr.gif | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\356.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | | hema\khl4ego4d 5rt4l.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\357.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | False | 1 | | | | hema\khl4ego4d 5rt4l.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\khl4ego4d 5rt4 | | True | 1 | | | l.bmp | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\357.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | | hema\spxsplgrt3p.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\358.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | False | 1 | | | | hema\spxsplgrt3p.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\spxsplgrt3p.pn | | True | 1 | | | g | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\358.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | | hema\xyz8ce1lhaimq.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\359.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | False | 1 | | | | hema\xyz8ce1lhaimq.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\xyz8ce1lhaimq. | | True | 1 | | | gif | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\359.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | | hema\bhbsuwyvu\awkorjfj_tbwlbiowt.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\360.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | False | 1 | | | | hema\bhbsuwyvu\awkorjfj_tbwlbiowt.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\awko | | True | 1 | | | rjfj_tbwlbiowt.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\360.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | | hema\bhbsuwyvu\mnu7k.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\361.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | False | 1 | | | | hema\bhbsuwyvu\mnu7k.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\mnu7 | | True | 1 | | | k.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\361.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | | hema\bhbsuwyvu\oxdt.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\362.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | False | 1 | | | | hema\bhbsuwyvu\oxdt.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\bhbsuwyvu\oxdt | | True | 1 | | | .png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\362.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | True | 1 | | | | hema\g7vbdhsavpjrp7\mhanq6ms_jz ssx.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\363.wncryt | source_file_name = c:\users\dssdpmx042\pictures\qrgufb3m\3yh | False | 1 | | | | hema\g7vbdhsavpjrp7\mhanq6ms_jz ssx.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\qrgufb3m\3yhhema\g7vbdhsavpjrp7 | | True | 1 | | | \mhanq6ms_jz ssx.png | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\363.wncryt | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\8r-qy | True | 1 | | | | t.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\364.wncryt | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\8r-qy | False | 1 | | | | t.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\_2hzdo\8r-qyt.png | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\364.wncryt | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\ddw1j | True | 1 | | | | 2dvm.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\365.wncryt | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\ddw1j | False | 1 | | | | 2dvm.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\_2hzdo\ddw1j2dvm.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\365.wncryt | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\ehtgs | True | 1 | | | | x0.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\366.wncryt | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\ehtgs | False | 1 | | | | x0.bmp | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\_2hzdo\ehtgsx0.bmp | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\366.wncryt | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\oiput | True | 1 | | | | xj.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\367.wncryt | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\oiput | False | 1 | | | | xj.png | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\_2hzdo\oiputxj.png | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\367.wncryt | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\wxqsa | True | 1 | | | | aq6i.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\368.wncryt | source_file_name = c:\users\dssdpmx042\pictures\_2hzdo\wxqsa | False | 1 | | | | aq6i.gif | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\pictures\_2hzdo\wxqsaaq6i.gif | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\368.wncryt | source_file_name = c:\users\dssdpmx042\videos\0rt9n7waqqvk6- | True | 1 | | | | s.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\369.wncryt | source_file_name = c:\users\dssdpmx042\videos\0rt9n7waqqvk6- | False | 1 | | | | s.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\0rt9n7waqqvk6-s.swf | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\369.wncryt | source_file_name = c:\users\dssdpmx042\videos\gls-an3bnb6su. | True | 1 | | | | mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\370.wncryt | source_file_name = c:\users\dssdpmx042\videos\gls-an3bnb6su. | False | 1 | | | | mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\gls-an3bnb6su.mkv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\370.wncryt | source_file_name = c:\users\dssdpmx042\videos\hi-kh7n3amacgd | True | 1 | | | | .mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\371.wncryt | source_file_name = c:\users\dssdpmx042\videos\hi-kh7n3amacgd | False | 1 | | | | .mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\hi-kh7n3amacgd.mkv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\371.wncryt | source_file_name = c:\users\dssdpmx042\videos\ouvp28f9ewmi29 | True | 1 | | | | .swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\372.wncryt | source_file_name = c:\users\dssdpmx042\videos\ouvp28f9ewmi29 | False | 1 | | | | .swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\ouvp28f9ewmi29.swf | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\372.wncryt | source_file_name = c:\users\dssdpmx042\videos\rlh2om7hsceo6p | True | 1 | | | | zume.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\373.wncryt | source_file_name = c:\users\dssdpmx042\videos\rlh2om7hsceo6p | False | 1 | | | | zume.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\rlh2om7hsceo6pzume.swf | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\373.wncryt | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | True | 1 | | | | bmwz\676ht6zbx.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\374.wncryt | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | False | 1 | | | | bmwz\676ht6zbx.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\676ht6zbx.mkv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\374.wncryt | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | True | 1 | | | | bmwz\929sjpu-xrkj3e1t9j7.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\375.wncryt | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | False | 1 | | | | bmwz\929sjpu-xrkj3e1t9j7.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\929sjpu-xrkj3e | | True | 1 | | | 1t9j7.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\375.wncryt | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | True | 1 | | | | bmwz\bcyq1.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\376.wncryt | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | False | 1 | | | | bmwz\bcyq1.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\bcyq1.flv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\376.wncryt | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | True | 1 | | | | bmwz\hve _ffgg.avi | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\377.wncryt | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | False | 1 | | | | bmwz\hve _ffgg.avi | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\hve _ffgg.avi | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\377.wncryt | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | True | 1 | | | | bmwz\oia-6xvkp.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\378.wncryt | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | False | 1 | | | | bmwz\oia-6xvkp.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\oia-6xvkp.swf | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\378.wncryt | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | True | 1 | | | | bmwz\peij538fk.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\379.wncryt | source_file_name = c:\users\dssdpmx042\videos\fxinkj5qtq47dc | False | 1 | | | | bmwz\peij538fk.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\fxinkj5qtq47dcbmwz\peij538fk.mp4 | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\379.wncryt | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | True | 1 | | | | 2iw7k-.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\380.wncryt | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | False | 1 | | | | 2iw7k-.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\hakyslty-m-z9\2iw7k-.mkv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\380.wncryt | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | True | 1 | | | | kdlazanuxnjlg4yrhvfq.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\381.wncryt | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | False | 1 | | | | kdlazanuxnjlg4yrhvfq.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\hakyslty-m-z9\kdlazanuxnjlg4yrhvf | | True | 1 | | | q.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\381.wncryt | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | True | 1 | | | | l1fq7b itpwhhcdab05u.avi | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\382.wncryt | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | False | 1 | | | | l1fq7b itpwhhcdab05u.avi | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\hakyslty-m-z9\l1fq7b itpwhhcdab05 | | True | 1 | | | u.avi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\382.wncryt | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | True | 1 | | | | lhhbjhevi.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\383.wncryt | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | False | 1 | | | | lhhbjhevi.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\hakyslty-m-z9\lhhbjhevi.mkv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\383.wncryt | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | True | 1 | | | | milwbj.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\384.wncryt | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | False | 1 | | | | milwbj.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\hakyslty-m-z9\milwbj.flv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\384.wncryt | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | True | 1 | | | | mr1ex3.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\385.wncryt | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | False | 1 | | | | mr1ex3.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\hakyslty-m-z9\mr1ex3.swf | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\385.wncryt | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | True | 1 | | | | vc2cl4ln.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\386.wncryt | source_file_name = c:\users\dssdpmx042\videos\hakyslty-m-z9\ | False | 1 | | | | vc2cl4ln.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\hakyslty-m-z9\vc2cl4ln.mkv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\386.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | 4oj9yfl3dn.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\387.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | 4oj9yfl3dn.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\4oj9yfl3dn.flv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\387.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | agmtjgfx.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\388.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | agmtjgfx.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\agmtjgfx.mkv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\388.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | hsbc.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\389.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | hsbc.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\hsbc.mkv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\389.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | hwj0zzo_r1q_pfff2.avi | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\390.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | hwj0zzo_r1q_pfff2.avi | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\hwj0zzo_r1q_pfff2.a | | True | 1 | | | vi | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\390.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | kj9gatk fbtmtzat.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\391.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | kj9gatk fbtmtzat.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\kj9gatk fbtmtzat.sw | | True | 1 | | | f | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\391.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | nbuaos9o4zd04f6rvgqy.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\392.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | nbuaos9o4zd04f6rvgqy.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\nbuaos9o4zd04f6rvgq | | True | 1 | | | y.swf | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\392.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | rh6x.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\393.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | rh6x.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\rh6x.mp4 | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\393.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | _akuod4i4xu431o1mvne.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\394.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | _akuod4i4xu431o1mvne.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\_akuod4i4xu431o1mvn | | True | 1 | | | e.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\394.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | gtgp\gdhhhwnb.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\395.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | gtgp\gdhhhwnb.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\gdhhhwnb.flv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\395.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | gtgp\t0_1iokbd.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\396.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | gtgp\t0_1iokbd.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\t0_1iokbd.swf | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\396.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | gtgp\vbvvvvb4i.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\397.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | gtgp\vbvvvvb4i.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\vbvvvvb4i.mkv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\397.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | gtgp\ydjjqoani2hety5e.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\398.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | gtgp\ydjjqoani2hety5e.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ydjjqoani2hety | | True | 1 | | | 5e.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\398.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | gtgp\ewpnrtkdx2ttvnfq8j\87xpzn.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\399.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | gtgp\ewpnrtkdx2ttvnfq8j\87xpzn.mp4 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | True | 1 | | | fq8j\87xpzn.mp4 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\399.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | gtgp\ewpnrtkdx2ttvnfq8j\dd3qogjnlsgkg1--_vs.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\400.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | gtgp\ewpnrtkdx2ttvnfq8j\dd3qogjnlsgkg1--_vs.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | True | 1 | | | fq8j\dd3qogjnlsgkg1--_vs.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\400.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | gtgp\ewpnrtkdx2ttvnfq8j\djqc-.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\401.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | gtgp\ewpnrtkdx2ttvnfq8j\djqc-.mkv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | True | 1 | | | fq8j\djqc-.mkv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\401.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | gtgp\ewpnrtkdx2ttvnfq8j\immdtks6k.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\402.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | gtgp\ewpnrtkdx2ttvnfq8j\immdtks6k.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | True | 1 | | | fq8j\immdtks6k.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\402.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | gtgp\ewpnrtkdx2ttvnfq8j\osbg1m5t.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\403.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | gtgp\ewpnrtkdx2ttvnfq8j\osbg1m5t.flv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | True | 1 | | | fq8j\osbg1m5t.flv | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\403.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | True | 1 | | | | gtgp\ewpnrtkdx2ttvnfq8j\qa9nxio402_he z.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\404.wncryt | source_file_name = c:\users\dssdpmx042\videos\jycsy200xq5sf\ | False | 1 | | | | gtgp\ewpnrtkdx2ttvnfq8j\qa9nxio402_he z.swf | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\videos\jycsy200xq5sf\gtgp\ewpnrtkdx2ttvn | | True | 1 | | | fq8j\qa9nxio402_he z.swf | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\404.wncryt | source_file_name = c:\users\public\music\sample music\kalimb | True | 1 | | | | a.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\405.wncryt | source_file_name = c:\users\public\music\sample music\kalimb | False | 1 | | | | a.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\music\sample music\kalimba.mp3 | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\405.wncryt | source_file_name = c:\users\public\music\sample music\maid w | True | 1 | | | | ith the flaxen hair.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\406.wncryt | source_file_name = c:\users\public\music\sample music\maid w | False | 1 | | | | ith the flaxen hair.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\music\sample music\maid with the flaxen hair | | True | 1 | | | .mp3 | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\406.wncryt | source_file_name = c:\users\public\music\sample music\sleep | True | 1 | | | | away.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\407.wncryt | source_file_name = c:\users\public\music\sample music\sleep | False | 1 | | | | away.mp3 | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\music\sample music\sleep away.mp3 | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\407.wncryt | source_file_name = c:\users\public\videos\sample videos\wild | True | 1 | | | | life.wmv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\408.wncryt | source_file_name = c:\users\public\videos\sample videos\wild | False | 1 | | | | life.wmv | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\public\videos\sample videos\wildlife.wmv | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\408.wncryt | source_file_name = c:\autoexec.bat | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\409.wncryt | source_file_name = c:\autoexec.bat | False | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\autoexec.bat | | True | 1 | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\409.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | | windows\explorer\thumbcache_1024.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\410.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | False | 1 | | | | windows\explorer\thumbcache_1024.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows\explorer\th | | True | 1 | | | umbcache_1024.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\410.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | | windows\explorer\thumbcache_32.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\411.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | False | 1 | | | | windows\explorer\thumbcache_32.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows\explorer\th | | True | 1 | | | umbcache_32.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\411.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | | windows\explorer\thumbcache_96.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\412.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | False | 1 | | | | windows\explorer\thumbcache_96.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows\explorer\th | | True | 1 | | | umbcache_96.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\412.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | True | 1 | | | | windows\explorer\thumbcache_sr.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\413.wncryt | source_file_name = c:\users\default\appdata\local\microsoft\ | False | 1 | | | | windows\explorer\thumbcache_sr.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\default\appdata\local\microsoft\windows\explorer\th | | True | 1 | | | umbcache_sr.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\413.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows\explorer\thumbcache_1024.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\414.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows\explorer\thumbcache_1024.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\local\microsoft\windows\explorer | | True | 1 | | | \thumbcache_1024.db | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\414.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | True | 1 | | | | ft\windows\explorer\thumbcache_sr.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\415.wncryt | source_file_name = c:\users\dssdpmx042\appdata\local\microso | False | 1 | | | | ft\windows\explorer\thumbcache_sr.db | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\415.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\micro | True | 1 | | | | soft\windows\cookies\low\dssdpmx042@google[2].txt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\416.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\micro | False | 1 | | | | soft\windows\cookies\low\dssdpmx042@google[2].txt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | | True | 1 | | | s\low\dssdpmx042@google[2].txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\416.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\micro | True | 1 | | | | soft\windows\cookies\low\dssdpmx042@java[1].txt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\417.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\micro | False | 1 | | | | soft\windows\cookies\low\dssdpmx042@java[1].txt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | | True | 1 | | | s\low\dssdpmx042@java[1].txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\417.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\micro | True | 1 | | | | soft\windows\cookies\low\dssdpmx042@oracle.112.2o7[2].txt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\windows\temp\418.wncryt | source_file_name = c:\users\dssdpmx042\appdata\roaming\micro | False | 1 | | | | soft\windows\cookies\low\dssdpmx042@oracle.112.2o7[2].txt | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+ | move | c:\users\dssdpmx042\appdata\roaming\microsoft\windows\cookie | | True | 1 | | | s\low\dssdpmx042@oracle.112.2o7[2].txt | | | | +----------------------+--------------------------------------------------------------+--------------------------------------------------------------+----------------------+----------------------+