VTI SCORE: 100/100
Dynamic Analysis Report |
Classification: |
Ransomware
|
Threat Names: |
DragonFly
Sodinokibi
Gen:Heur.Ransom.RTH.1
...
|
CUsersGrujaDesktop06cfe7f5d88e82f7adda6d8333ca8b302debb22904c68a942188be5730e9b3c8.exe
Windows Exe (x86-32)
Created at 2021-01-24T13:41:00
Remarks
(0x0200001B): The maximum number of file reputation requests per analysis (150) was exceeded.
Master Boot Record Changes
»
Sector Number | Sector Size | Actions |
---|---|---|
2063 | 512 Bytes |
...
|
This is a filtered view
This list contains only the embedded files, downloaded files, and dropped files
Filters: |
There are no files for this filter
There are no files in this analysis
Filename | Category | Type | Severity | Actions |
---|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CUsersGrujaDesktop06cfe7f5d88e82f7adda6d8333ca8b302debb22904c68a942188be5730e9b3c8.exe | Sample File | Binary |
Malicious
|
...
|
»
File Reputation Information
»
Severity |
Blacklisted
|
Names | Mal/Generic-S |
PE Information
»
Image Base | 0x400000 |
Entry Point | 0x4081b5 |
Size Of Code | 0x7200 |
Size Of Initialized Data | 0x9400 |
File Type | FileType.executable |
Subsystem | Subsystem.windows_gui |
Machine Type | MachineType.i386 |
Compile Timestamp | 2020-12-23 17:01:07+00:00 |
Sections (4)
»
Name | Virtual Address | Virtual Size | Raw Data Size | Raw Data Offset | Flags | Entropy |
---|---|---|---|---|---|---|
.text | 0x401000 | 0x71d3 | 0x7200 | 0x400 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ | 6.27 |
.rdata | 0x409000 | 0x176 | 0x200 | 0x7600 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 3.01 |
.data | 0x40a000 | 0x844c | 0x6800 | 0x7800 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 5.93 |
.reloc | 0x413000 | 0xaec | 0xc00 | 0xe000 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ | 6.5 |
Imports (1)
»
KERNEL32.dll (3)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
GetProcAddress | 0x0 | 0x409000 | 0x9128 | 0x7728 | 0x29e |
LoadLibraryA | 0x0 | 0x409004 | 0x912c | 0x772c | 0x3ac |
ExitProcess | 0x0 | 0x409008 | 0x9130 | 0x7730 | 0x151 |
Memory Dumps (2)
»
Name | Process ID | Start VA | End VA | Dump Reason | PE Rebuild | Bitness | Entry Point | AV | YARA | Actions |
---|---|---|---|---|---|---|---|---|---|---|
cusersgrujadesktop06cfe7f5d88e82f7adda6d8333ca8b302debb22904c68a942188be5730e9b3c8.exe | 1 | 0x00F40000 | 0x00F53FFF | Relevant Image |
![]() |
32-bit | 0x00F41974 |
![]() |
![]() |
...
|
cusersgrujadesktop06cfe7f5d88e82f7adda6d8333ca8b302debb22904c68a942188be5730e9b3c8.exe | 1 | 0x00F40000 | 0x00F53FFF | Final Dump |
![]() |
32-bit | 0x00F451A2 |
![]() |
![]() |
...
|
Local AV Matches (1)
»
Threat Name | Severity |
---|---|
Gen:Heur.Ransom.RTH.1 |
Malicious
|
YARA Matches (1)
»
Rule Name | Rule Description | Classification | Score | Actions |
---|---|---|---|---|
DragonFly_Unspecified_Malware_Sep1_A1 | Malware from DragonFly APT report | - |
5/5
|
...
|
YARA Matches (1)
»
Rule Name | Rule Description | Classification | Score | Actions |
---|---|---|---|---|
Sodinokibi_RansomNote | Sodinokibi Ransomware note | - |
5/5
|
...
|
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Id8szDz7a0w\AP6Dhi.swf.c06622a1 | Modified File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Id8szDz7a0w\SsS1Qlj0VTcoohhkUWi.pptx.c06622a1 | Modified File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Web Slice Gallery.url.c06622a1 | Modified File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\0WmTDpM1z.bmp.c06622a1 | Modified File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\8_Zfefw0OFfdn4m.bmp.c06622a1 | Modified File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\ZLQWp8VVzu\Z9eYlXFnqtFPpM\UYLd.gif.c06622a1 | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\c06622a1.ico | Dropped File | Image |
Unknown
|
...
|
»
\\?\C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\Winre.wim.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\lulcit amkdfe.contact.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\6_2e p3MGy.swf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Administrator.contact.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\A1IUZFLl6juvAhJaCm.mkv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\chucu jadnvk.contact.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\8d2NxlEedg.avi.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9ToKo5Bm3mR9l4.mp4.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\C0QBEz.gif.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\GBJcqG InHDIXWX7aw2.mkv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\gYTKdnU9U9.swf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\gzo ImiS2UujKZMC.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\h-Hlue\FzPnIc.rtf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\H1L2uD_Z3TzCntcS0qS\Iq1TGVcomjA.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Id8szDz7a0w\3dCTOiv4.pdf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Id8szDz7a0w\cnsWpPMO1m-nsTwgc\E7FRCe_0yFV.pptx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Id8szDz7a0w\cnsWpPMO1m-nsTwgc\YWEGeiy Lucr J4gfrt.wav.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Id8szDz7a0w\Mf0WvE.flv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Id8szDz7a0w\TJ6EEdNAUO4l9hn\dU5zQ9J3ch2Om5Aj2yz.pdf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Id8szDz7a0w\Z6MOpJ7HjT.mkv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NFtp.flv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\qj-mntX.flv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\s9OE-nV-dkAhhF.swf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\TnvVAS.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UB2iD9do9wG9wA7Spg.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\WmDmxrMTuu2.gif.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Id8szDz7a0w\TJ6EEdNAUO4l9hn\1vBK_M.csv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Id8szDz7a0w\TJ6EEdNAUO4l9hn\cmaaKq91yJ82Pxf.flv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Id8szDz7a0w\TJ6EEdNAUO4l9hn\lwV 0hsOIy.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\igDMSrqHNIXR.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KjeHSniXoIvD7SlnSDy.jpg.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PZ5qHY.avi.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\T5g8NL.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\U5A1wNa5RsBATNvj.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0_azADN_kj_yk z3GUN.docx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\2tfUDBdxmf64_w\g7mZ8kCwoJpt1.pps.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\2tfUDBdxmf64_w\hKLGhQi.odp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\2tfUDBdxmf64_w\lcfPkoCr.xls.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\45ouoB8nzuDJ.csv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5DLy5.xlsx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ELXseSjd-063nXffKC.xlsx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5muj95.xlsx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\NS-PI08cl E0CZ0AD.pptx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\NvDcEOSMUqTbVV8n4.pptx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\F8m820x7\2-vtMSS13nYUa2.pdf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\F8m820x7\6kRuNR26Q0ncnu.xls.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\F8m820x7\G6xhilW7.pdf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\F8m820x7\s_O1k V7wOQ3X-DW6WW.doc.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\VoKVB4ZKDkiHr4RSN1\FwQBsWg0DRr9fAA.ppt.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\VoKVB4ZKDkiHr4RSN1\Xgz9J67R.ots.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\x kVsHDkjAuECPHeoW\BKOJ82 W9yYD.ppt.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\x kVsHDkjAuECPHeoW\gfpSs.xls.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\x kVsHDkjAuECPHeoW\QY0nMDkwxi6m.ods.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\F8m820x7\05G4A_bd.doc.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\F8m820x7\3jI XWvoc.odt.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\F8m820x7\9mgTx3gVxoVOc7xRaj.pdf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\F8m820x7\Ubtm8V.pptx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\rvL-U9LVkxG.pptx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\sH18QgfdAy-EUtCu.pptx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\uxEyj1w3yyg.docx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\VoKVB4ZKDkiHr4RSN1\juBLep8EtZP.csv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\x kVsHDkjAuECPHeoW\gAO-0Y8QZ7iAYGK7Sja.xlsx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\x kVsHDkjAuECPHeoW\ow2Zq2Z A3h_Hs.pps.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Suggested Sites.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\x kVsHDkjAuECPHeoW\uIpMQ O66NBZH.docx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\r3rzKvocn_.xlsx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\SBssxnpEdQSm8I5.docx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE Add-on site.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Home.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft Store.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Entertainment.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Sports.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSNBC News.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Gallery.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Money.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Get Windows Live.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Mail.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\sp6AE4NZCo52aGrKxD\fV7b28tZTM YqY0S\JZVBOKxj2eLEEdPiA\16h-.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\sp6AE4NZCo52aGrKxD\fV7b28tZTM YqY0S\58kutS-VZ_.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\sp6AE4NZCo52aGrKxD\fV7b28tZTM YqY0S\JZVBOKxj2eLEEdPiA\FwSXzR5XrIejo.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\sp6AE4NZCo52aGrKxD\fV7b28tZTM YqY0S\JZVBOKxj2eLEEdPiA\BET3vPa5NoXZqsdKFh.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\sp6AE4NZCo52aGrKxD\fV7b28tZTM YqY0S\JZVBOKxj2eLEEdPiA\KhOz.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\sp6AE4NZCo52aGrKxD\fV7b28tZTM YqY0S\JZVBOKxj2eLEEdPiA\kNf4JZn\nZ3pb9dWPNfCrTgYkw.wav.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\sp6AE4NZCo52aGrKxD\fV7b28tZTM YqY0S\JZVBOKxj2eLEEdPiA\kNf4JZn\piZ3fb2N-l-_YFHpWOlt.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\sp6AE4NZCo52aGrKxD\fV7b28tZTM YqY0S\JZVBOKxj2eLEEdPiA\kNf4JZn\TPy1D.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\sp6AE4NZCo52aGrKxD\fV7b28tZTM YqY0S\JZVBOKxj2eLEEdPiA\kNf4JZn\Q1lQSg kwY2aNZCqpV_T.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\sp6AE4NZCo52aGrKxD\LpaHDPB.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\sp6AE4NZCo52aGrKxD\fV7b28tZTM YqY0S\XIUHvad VlT72LhL.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\D0sN2boASCy9vEbn.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\R52En4y _3dX.wav.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\z3-tnC\-Z8dtk8VWDU.wav.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\z3-tnC\5Z2NqwTA5 2JZZNSm.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\z3-tnC\IIGN22M0Zn01dtJHw.wav.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\z3-tnC\o9e4teOb.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\z3-tnC\xpRs11.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\melgzpehBJ5nW.jpg.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\jP5w5f0VdLdo-EbieAg_.png.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Nmf7WVuIO_hm0.png.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\0O88q71.png.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\z-m538Ne.png.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\43yp.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\7esFsSbe8.png.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\AX6_mnDSy\RSbMERxin-_GjeJ1DC.jpg.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\AX6_mnDSy\sEgeQA.gif.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\IIl7cZJVDTHmvn.jpg.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\AX6_mnDSy\_hviJZyi.jpg.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\l30s.png.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\ZLQWp8VVzu\0Lg94VFH3xczLrTnshRI.jpg.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\p2Fmv1B44Mx.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\ZLQWp8VVzu\XyyhMuAsCd.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\ZLQWp8VVzu\JdUgY81.png.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\ZLQWp8VVzu\Z9eYlXFnqtFPpM\BK-cTblnCTtdx.gif.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\ZLQWp8VVzu\Z9eYlXFnqtFPpM\5IcsU.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\ZLQWp8VVzu\Z9eYlXFnqtFPpM\jv 1pC_kCwXk5a2f8Q.gif.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\ZLQWp8VVzu\Z9eYlXFnqtFPpM\hElEG0AIJDp_.gif.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\ZLQWp8VVzu\Z9eYlXFnqtFPpM\UeVySRw.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\ZLQWp8VVzu\Z9eYlXFnqtFPpM\Q1cepvN-j.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\ZLQWp8VVzu\Z9eYlXFnqtFPpM\Utng.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Indexed Locations.search-ms.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Everywhere.search-ms.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\4710A08 09t9o0aXhpe\78UJVg7V.mp4.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\4710A08 09t9o0aXhpe\iOgAhCv1rp-V82bQ\Bl3DNUZ9Mf.mkv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\4710A08 09t9o0aXhpe\iOgAhCv1rp-V82bQ\YfFJi.flv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\4710A08 09t9o0aXhpe\iOgAhCv1rp-V82bQ\9SrRbKrmvJ.avi.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\4710A08 09t9o0aXhpe\iOgAhCv1rp-V82bQ\ccRD.swf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\4710A08 09t9o0aXhpe\iOgAhCv1rp-V82bQ\uKIkmzIQ_.mp4.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\AjbC-qWMDbt_1KJeNRxU.swf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\8Vvuv0bTqUZdX3oZQ\XRF4L.mkv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\QLTL2-0X\GP1tjsXSUsoxTDW.mkv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\rBDds\483DuOeJ6\ami1FOL1V 7AbUHpa9.avi.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\rBDds\483DuOeJ6\qBvApL nDJJvPiXix.mkv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\TbTXIkRpC9ijh71zsc.avi.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\cvDNeGwNwfaRnjiro6x.avi.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\QLTL2-0X\G0zk7IbCrQjSGHoa.mkv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\QLTL2-0X\URW1HXnF.mkv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\rBDds\483DuOeJ6\MD5K7oNBbNoUReLGp.mp4.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\rBDds\8uXvFATg6zvjO 7.mkv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\YJ8O1oZ4VFaX7\bq ithdPfB.mp4.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\V5_5Z8.avi.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\T1BEA5dZfOjosZ.flv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\PZSkkB.swf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\sp6AE4NZCo52aGrKxD\fV7b28tZTM YqY0S\JZVBOKxj2eLEEdPiA\qWi.m4a.c06622a1 | Modified File | Stream |
Not Queried
|
...
|
»
\\?\C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\boot.sdi.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Aclviho ASldjfl.contact.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\asdlfk poopvy.contact.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9STobsEsIlXi_C.gif.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\C5glW.m4a.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dOl_g7LT8L5bk.flv.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\sikvnb huvuib.contact.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CyezILaJLHLWO3wcsD5.bmp.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\h-Hlue\2eNvoC-ePTSuJslD.m4a.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\h-Hlue\dKUv_cpHglR.jpg.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\H1ASIo.pptx.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\h-Hlue\aLxsOiDGUFDq.pdf.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\HWgYJLRgIO7alplF6d-p.mkv.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Id8szDz7a0w\6JN0wpz-eY.mkv.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Id8szDz7a0w\TJ6EEdNAUO4l9hn\6DA0rOZsvCx.jpg.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\iwHN9FuwRsyWXuAnhp.mkv.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\M9ZilojdIfYHk5ZHoL8Q.m4a.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Mgxos.csv.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\S k2QDvhJbxo.mp4.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\VhYsypDPId.doc.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\2tfUDBdxmf64_w\ySiHIadC6Ow5.ppt.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4Vq5hkld9O1EV.xlsx.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\FD9PK85B_zpq.xlsx.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\IE1bmdttHCskZ2U8.pptx.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\MZDq3p1rpV5vpB.docx.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\DtR t6N.csv.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\F8m820x7\W45RP6btixzZE.pps.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\AVFCiAJsAJ.doc.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\F8m820x7\OVOG9EZGH62tetjqqe.pps.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\z7yV5TDsi7l\DN6GpPK5kNTZq1fYcf_.doc.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\PuwBlfUakQWQJF00DEBu.docx.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\SZALzgsX8YNlgm.rtf.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\oHjAL\VoKVB4ZKDkiHr4RSN1\Y1QH4rGO.ods.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\voeimd@djhreuu.uhd.pst.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\t12Tfg.xlsx.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\XTN2PFb A9PsJ3IYh2i.pptx.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Spaces.url.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE site on Microsoft.com.url.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Work.url.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Autos.url.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\9OXK2ad.mp3.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\kakWe5.m4a.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\glC_GXnPfR_aHYD651.wav.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\m1 6-.m4a.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\sp6AE4NZCo52aGrKxD\fV7b28tZTM YqY0S\JZVBOKxj2eLEEdPiA\8iN6PgHsN.wav.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\sp6AE4NZCo52aGrKxD\fV7b28tZTM YqY0S\JZVBOKxj2eLEEdPiA\kNf4JZn\YK12.m4a.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\4ytVPICjNJN\sp6AE4NZCo52aGrKxD\fV7b28tZTM YqY0S\JZVBOKxj2eLEEdPiA\OsRVCyX.wav.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\z3-tnC\m6oEvZ.m4a.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\DnG-N3d9o.png.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Cxag45AySZdPT 78RxE_.gif.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\AX6_mnDSy\XAEzSPi qgos.png.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\nRx9q7P7iypouDtP4z P.bmp.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\pZxmQYYyFLjb.png.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_nLNF\Rr8mx6wybDv.jpg.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\4710A08 09t9o0aXhpe\iOgAhCv1rp-V82bQ\Ny4IBsN6sDAZ.mp4.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\QLTL2-0X\b7bwTMmAmGg_Pf.avi.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\QLTL2-0X\nkwyTi.swf.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\rBDds\483DuOeJ6\3vvtB.swf.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\rBDds\QK5W0jsW Mk76.mp4.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\QLTL2-0X\JgvxUVpMfo2px.mkv.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\rBDds\483DuOeJ6\4-qA 6xhtA1BI.mkv.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\rBDds\wy -GPkxHmMj.avi.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\Qga9EluiUyFQ9xR.avi.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\P2SDJqjsKJSaPnHQeAI\e6Wwn\YJ8O1oZ4VFaX7\hjqujcjPSTWT.swf.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»