VTI SCORE: 100/100
Dynamic Analysis Report |
Classification: |
Ransomware
|
Threat Names: |
DragonFly
Sodinokibi
Gen:Heur.Ransom.RTH.1
...
|
idfoodsf.exe
Windows Exe (x86-32)
Created at 2021-01-15T10:43:00
Remarks
(0x0200001B): The maximum number of file reputation requests per analysis (150) was exceeded.
Master Boot Record Changes
»
Sector Number | Sector Size | Actions |
---|---|---|
2063 | 512 Bytes |
...
|
This is a filtered view
This list contains only the embedded files, downloaded files, and dropped files
Filters: |
There are no files for this filter
There are no files in this analysis
Filename | Category | Type | Severity | Actions |
---|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\idfoodsf.exe | Sample File | Binary |
Malicious
|
...
|
»
PE Information
»
Image Base | 0x400000 |
Entry Point | 0x4081b5 |
Size Of Code | 0x7200 |
Size Of Initialized Data | 0x9400 |
File Type | FileType.executable |
Subsystem | Subsystem.windows_gui |
Machine Type | MachineType.i386 |
Compile Timestamp | 2020-12-23 17:01:07+00:00 |
Sections (4)
»
Name | Virtual Address | Virtual Size | Raw Data Size | Raw Data Offset | Flags | Entropy |
---|---|---|---|---|---|---|
.text | 0x401000 | 0x71d3 | 0x7200 | 0x400 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ | 6.27 |
.rdata | 0x409000 | 0x176 | 0x200 | 0x7600 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 3.01 |
.data | 0x40a000 | 0x844c | 0x6800 | 0x7800 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 5.81 |
.reloc | 0x413000 | 0xaec | 0xc00 | 0xe000 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ | 6.5 |
Imports (1)
»
KERNEL32.dll (3)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
GetProcAddress | 0x0 | 0x409000 | 0x9128 | 0x7728 | 0x29e |
LoadLibraryA | 0x0 | 0x409004 | 0x912c | 0x772c | 0x3ac |
ExitProcess | 0x0 | 0x409008 | 0x9130 | 0x7730 | 0x151 |
Memory Dumps (2)
»
Name | Process ID | Start VA | End VA | Dump Reason | PE Rebuild | Bitness | Entry Point | AV | YARA | Actions |
---|---|---|---|---|---|---|---|---|---|---|
idfoodsf.exe | 1 | 0x00CA0000 | 0x00CB3FFF | Relevant Image |
![]() |
32-bit | 0x00CA189D |
![]() |
![]() |
...
|
idfoodsf.exe | 1 | 0x00CA0000 | 0x00CB3FFF | Final Dump |
![]() |
32-bit | 0x00CA51A2 |
![]() |
![]() |
...
|
Local AV Matches (1)
»
Threat Name | Severity |
---|---|
Gen:Heur.Ransom.RTH.1 |
Malicious
|
YARA Matches (1)
»
Rule Name | Rule Description | Classification | Score | Actions |
---|---|---|---|---|
DragonFly_Unspecified_Malware_Sep1_A1 | Malware from DragonFly APT report | - |
5/5
|
...
|
YARA Matches (1)
»
Rule Name | Rule Description | Classification | Score | Actions |
---|---|---|---|---|
Sodinokibi_RansomNote | Sodinokibi Ransomware note | - |
5/5
|
...
|
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\bi_N4C.xlsx.c06622a1 | Modified File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\ryzV8yuUzx3uE\mRIBM.odp.c06622a1 | Modified File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\lNiXwvZG3UHVD9Kw D Q\XUJXgdHcT7y1.wav.c06622a1 | Modified File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\rf10YNM.m4a.c06622a1 | Modified File | Stream |
Unknown
|
...
|
»
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\c06622a1.ico | Dropped File | Image |
Unknown
|
...
|
»
\\?\C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\boot.sdi.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\Winre.wim.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Administrator.contact.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\asdlfk poopvy.contact.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\sikvnb huvuib.contact.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\-uY5xVhL.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5YFB2IUVJV0.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5KWbxml7IT.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\6r2 Xhif0e1XVd.docx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\98J92AdoDuoGu.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CRnGB23a2oNLH1b.gif.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\bnqSfXWtMeK2iSUYfI.wav.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\iTQ-yXGXHtYUFbxa.png.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\jT36tI.avi.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\K2QW6o1V4zrGcZk.wav.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\kndXrUZ5-qVM-oAY.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\lL rT_iquJbDmlvt9l9.png.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\sL3sOSs.wav.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\SYZKIrJgdWjoZp9.gif.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\WPXZau7ksZL.jpg.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\StdlUxDRbbDp.mp4.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\VVx2M0wK.jpg.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\X rJVfo28OChLRQXCfhx.ppt.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZIqq01CnHJJwR\AiMvEt9bBE9f9FGdQ.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZIqq01CnHJJwR\C4Mfi4 w31Ph8.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZIqq01CnHJJwR\H5q20OMLtY.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZIqq01CnHJJwR\itDojnXHYr_bMbkK1b.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZIqq01CnHJJwR\M8sIlcr9Kip1-hC9n.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zNgiUMtwIx\3WrKbcrqGQWluTDrACp.png.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zNgiUMtwIx\fQBpM58x.xlsx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zNgiUMtwIx\wgSGXoahJBicS4.swf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZIqq01CnHJJwR\QC07dsKRwK y.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZIqq01CnHJJwR\vNMxUE.png.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zNgiUMtwIx\aaTy.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zNgiUMtwIx\UnXbhzP45298tM0kFv.wav.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zNgiUMtwIx\YAg4SbqQt.avi.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\3PvKyPdpu0lurMm.docx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\491FT7zCexrYLn_KV2i.docx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\75zCwD6T9WYW.xlsx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\8FWZ88.odp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\aCWg-pQ.pdf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ASgzk.odp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\mKe0mxpFf7kQlueY.pptx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\dK4taQOW3BPX.pptx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\kefVaBjYmRdF1.pptx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\nd5TBS.xlsx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\xgPWfuE3CiauL.pptx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\v8B7 p7omAvTnvma.odp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\7hXcpypld6Q.rtf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\kMpI.pps.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\-QFYowbe\2ySz27JapBU0Oa.pps.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\-QFYowbe\6z8JjAGWT6AK.odp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\-QFYowbe\Fjb5gfB8.pps.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\-QFYowbe\XHvkaY6KLNiJuFyAk_.doc.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\88lX_mh5lpPm\rL-yOwn0ZZgZddUS.pptx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\88lX_mh5lpPm\ZthHbGzL_PjU.ppt.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\-QFYowbe\d- dbc5fvbfPF0ACEfH.docx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\-QFYowbe\OkahbG2X jgZg.pptx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\2Pii2h.xls.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\88lX_mh5lpPm\HRjqto7px58xuzy.docx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\88lX_mh5lpPm\uU3Lzd - buLe2_\3 TEqrmP4SFdFZ164.ods.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\ryzV8yuUzx3uE\rVEW8 Q96buBc.xls.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\ryzV8yuUzx3uE\rNgfIYXf.rtf.c06622a1 | Dropped File | Binary |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\wvlxx6pNXiS.ppt.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\vUMtlYMl.docx.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Suggested Sites.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Web Slice Gallery.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE Add-on site.url.c06622a1 | Dropped File | Compressed |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Home.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft Store.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Autos.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Entertainment.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Money.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSNBC News.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Get Windows Live.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Gallery.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Mail.url.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\CnOPGHSASieb.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\efQ2i0D5 d__8X-vLSo.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\fZIk7sRS9B\o MhkrPjWzQ90.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\fZIk7sRS9B\qAyaBv.wav.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\G1kIcNUvF9a1L5rTisLt\wNYFoKYhkIFRjzLq.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\J0yI t\eesgA2CQjR2iHr87n4.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\TXAoeYh76KLw3RlgqbnC.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\k-cI7bu1aSXti5iWZuUR\dirC_ 6.wav.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\k-cI7bu1aSXti5iWZuUR\ZS0z8d.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\UpNSot6MnsxUxqCl_wvA.wav.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\4lOUbG\HVrtS.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\4lOUbG\LPnP0zZ7L\Ablm5q4G.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\4lOUbG\LPnP0zZ7L\J023_px.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\4lOUbG\hP5prE.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\jiDmBv.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\4lOUbG\J-iw.wav.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\4lOUbG\LPnP0zZ7L\CZr_rmhXD6Ex6.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\4lOUbG\LPnP0zZ7L\va_1xt0NyXWscYIzlv.wav.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\lNiXwvZG3UHVD9Kw D Q\4_Vh_vo1hZHfJ--tWdw.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\KURBcjl3.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\lNiXwvZG3UHVD9Kw D Q\adSqbHw.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\lNiXwvZG3UHVD9Kw D Q\PS5Jm19.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\lNiXwvZG3UHVD9Kw D Q\AgAi2xVsC1tyl.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\lNiXwvZG3UHVD9Kw D Q\raTDxN8y7Q7vywp.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\lNiXwvZG3UHVD9Kw D Q\Vrm8P aH\ezzW_06fkU7400EGO.wav.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\lNiXwvZG3UHVD9Kw D Q\Vrm8P aH\O EQb6BgtJHtRIydzqK4.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\lNiXwvZG3UHVD9Kw D Q\Vrm8P aH\aktUJZSyoBlhczRPPcSp.mp3.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\WvRAl\Z0tARC13B7tiCY3mTvvI.wav.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\Yuqn.m4a.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\vOO-vgM7Bj.png.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\laP3 _TZAjuy.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\6qoV99z5F43.gif.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\7ZCJwAfR5VGvVkS.png.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\BbFc02.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\CD22\n9X_\AMFkbPo.jpg.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\CD22\n9X_\KhOH.jpg.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\ry57L\1TRsqcrEatY3P2 xj.jpg.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\ry57L\aBEfoYUIJCal0VU4J.jpg.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\ry57L\GRW0yCfV58-.gif.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\teXGz5kx7jB2.jpg.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\LTMYS19lGfu.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\ry57L\9QMMz.gif.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\ry57L\GyZvF1howoUVN3.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XGqrhHf_R\8eSxV.gif.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XGqrhHf_R\_aZn-.bmp.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XGqrhHf_R\Miwvk.jpg.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\YiCZnZd3WoEZPYnVg\AhvF9NsMQwDs1mv.gif.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\_cIOWlZbKNbSyFH_z1b.jpg.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Indexed Locations.search-ms.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hMUWsCiYUPz2VTz\4b6CH1fkgoEr1XMe.mp4.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hMUWsCiYUPz2VTz\fQerDQH7U0mB3.swf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hMUWsCiYUPz2VTz\hXlikYJEoBXEyktj.flv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Dg40hxxsY.mp4.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hMUWsCiYUPz2VTz\rukKt9s_dMef3uJS.mp4.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hMUWsCiYUPz2VTz\hJBPINTz49_rMgysH5.avi.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hMUWsCiYUPz2VTz\WLHz66im9n OAN9lvyaW.flv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hMUWsCiYUPz2VTz\O-30P.swf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hMUWsCiYUPz2VTz\RzCnZ3w0Un.avi.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\HWaJyoZ8wC.avi.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SWQjmzX2VptJG\8cBrE.flv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SWQjmzX2VptJG\HCHzihG6VHn2L_sCz.mp4.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SWQjmzX2VptJG\UFgJgs53B5nyN.mp4.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SWQjmzX2VptJG\DAbKQ3xFcbi.swf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SWQjmzX2VptJG\xMlh1 1LcDLUA.flv.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SWQjmzX2VptJG\MJ1ddR.swf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SWQjmzX2VptJG\x5Lo x.mp4.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SWQjmzX2VptJG\Z-F8O23mq.mp4.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\W2MpVj.mp4.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\UsxrJpzfR.swf.c06622a1 | Dropped File | Stream |
Unknown
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\x7ur2.m4a.c06622a1 | Modified File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SWQjmzX2VptJG\z5UR8v_xI.mp4.c06622a1 | Modified File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Aclviho ASldjfl.contact.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\lulcit amkdfe.contact.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\chucu jadnvk.contact.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\-ZttmbsUjlvhPhcT.m4a.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\0XvFdhIAi1nsFBCVZ.jpg.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3BMM Q0bzkzLX0Gqw5.flv.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\5zWh464.avi.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\8TzcRc4KQBgmUVZe.avi.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\FJJj.wav.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KmS7v8iA7McRcMINuK4X.mp4.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KReoraVUftmC6RXh.gif.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\QG826peLsBKG.png.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\xDRDDFHj0R3Sh.pdf.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZIqq01CnHJJwR\8x2Frw4GPMex.jpg.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZIqq01CnHJJwR\E5CGTZcxThC.mkv.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZIqq01CnHJJwR\Ue7LWDJ Xw.doc.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zNgiUMtwIx\oemmUE94iN-oqAQuFaf.ppt.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zNgiUMtwIx\O7sfdfa6z7SFDc0lS.xlsx.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4CYSV.docx.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ccVEprlRmUDKtxp.xlsx.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\eZ6Mr_pLus.pps.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\GWKv.docx.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\c3zqEM6.xlsx.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\f8BYKgohnV4.docx.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\rg_etqM_g.pptx.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Z4Usx4v.docx.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\N2N0 FWw405aMO.pptx.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\voeimd@djhreuu.uhd.pst.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\y-3kn.doc.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\l7DUrqI7053O.pdf.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\88lX_mh5lpPm\3-UD.ods.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\ryzV8yuUzx3uE\8pIMNpwy.ppt.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\-QFYowbe\6hPV.csv.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\gnHK8.doc.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\QNlgQkm9Qwac\ryzV8yuUzx3uE\BSAiBEBUj.pdf.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_6F2UOdqzk-Uc\zxCybo3FW0ulKyY.xls.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE site on Microsoft.com.url.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Work.url.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Sports.url.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN.url.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Spaces.url.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\CNWwy.mp3.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\G1kIcNUvF9a1L5rTisLt\UFLQyipcXOQgG4p.wav.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\k-cI7bu1aSXti5iWZuUR\S7xgL3CvoffAc-naWOw.m4a.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\4lOUbG\LPnP0zZ7L\ynIixMPajD.wav.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\4lOUbG\whcxcPPdpxl.mp3.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\lNiXwvZG3UHVD9Kw D Q\Vrm8P aH\hdD2hC_-Ra.wav.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\WvRAl\-2PF.m4a.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\WvRAl\h6M xRQmnZv.m4a.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Music\Uulx-x\yBPZah0nIIj3ymKj190.mp3.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\cYXPwSAdF9Yyy_t5H.png.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\CD22\n9X_\MTfAnkz2mAL.jpg.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\CD22\n9X_\mV L-Vgm2.bmp.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\CD22\ppxLbB.gif.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\CD22\uAJ_dGqh_G\tuVmYAFcNy3ce9A9DK.jpg.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\Lxd4xieb.jpg.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\I3KHqzFc5.bmp.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\ry57L\BKUW-4LKwDMe.jpg.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iwvH BdfW9G\_MTmDgixdwsa7RVqo\ZjSGQQ7rSaytFk_.gif.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\YiCZnZd3WoEZPYnVg\X8yu.png.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Everywhere.search-ms.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hMUWsCiYUPz2VTz\KgbIoZ i.mp4.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hMUWsCiYUPz2VTz\4o6tuvsKWxaerB.mkv.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hMUWsCiYUPz2VTz\ip6-rAwrYeHBxC7.mkv.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\PAuWBm2A.avi.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\SWQjmzX2VptJG\6rmODmx20qDNcI94tlWL.avi.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»
\\?\C:\Users\5p5NrGJn0jS HALPmcxz\Videos\XpsFF-fA3iCT.swf.c06622a1 | Dropped File | Stream |
Not Queried
|
...
|
»