VTI SCORE: 100/100
Dynamic Analysis Report |
Classification: Ransomware, Trojan |
Tiger4444.exe
Windows Exe (x86-32)
Created at 2019-05-18T06:39:00
Remarks
(0x200001d): The maximum number of extracted files was exceeded. Some files may be missing in the report.
(0x200001b): The maximum number of file reputation requests per analysis (20) was exceeded.
This is a filtered view
This list contains only the embedded files, downloaded files, and dropped files
Filters: |
There are no files for this filter
There are no files in this analysis
Filename | Category | Type | Severity | Actions |
---|
File Reputation Information
»
Severity |
Blacklisted
|
First Seen | 2019-05-09 19:37 (UTC+2) |
Last Seen | 2019-05-18 07:11 (UTC+2) |
Names | Win32.Trojan.Encoder |
Families | Encoder |
Classification | Trojan |
PE Information
»
Image Base | 0x400000 |
Entry Point | 0x411b58 |
Size Of Code | 0x21a00 |
Size Of Initialized Data | 0x22a00 |
File Type | FileType.executable |
Subsystem | Subsystem.windows_gui |
Machine Type | MachineType.i386 |
Compile Timestamp | 2019-05-03 23:16:59+00:00 |
Sections (5)
»
Name | Virtual Address | Virtual Size | Raw Data Size | Raw Data Offset | Flags | Entropy |
---|---|---|---|---|---|---|
.text | 0x401000 | 0x21928 | 0x21a00 | 0x400 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ | 6.62 |
.rdata | 0x423000 | 0xaa96 | 0xac00 | 0x21e00 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 5.17 |
.data | 0x42e000 | 0x16198 | 0x800 | 0x2ca00 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 2.06 |
.rsrc | 0x445000 | 0x1e0 | 0x200 | 0x2d200 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 4.71 |
.reloc | 0x446000 | 0x1894 | 0x1a00 | 0x2d400 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ | 6.5 |
Imports (5)
»
KERNEL32.dll (119)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
CreateFileMappingW | 0x0 | 0x423030 | 0x2ce44 | 0x2bc44 | 0x8c |
InterlockedPushEntrySList | 0x0 | 0x423034 | 0x2ce48 | 0x2bc48 | 0x2f1 |
MapViewOfFile | 0x0 | 0x423038 | 0x2ce4c | 0x2bc4c | 0x357 |
InitializeSListHead | 0x0 | 0x42303c | 0x2ce50 | 0x2bc50 | 0x2e7 |
InterlockedPopEntrySList | 0x0 | 0x423040 | 0x2ce54 | 0x2bc54 | 0x2f0 |
InterlockedExchange | 0x0 | 0x423044 | 0x2ce58 | 0x2bc58 | 0x2ec |
GetFileSizeEx | 0x0 | 0x423048 | 0x2ce5c | 0x2bc5c | 0x1f1 |
SetEndOfFile | 0x0 | 0x42304c | 0x2ce60 | 0x2bc60 | 0x453 |
GetLastError | 0x0 | 0x423050 | 0x2ce64 | 0x2bc64 | 0x202 |
DeleteFileW | 0x0 | 0x423054 | 0x2ce68 | 0x2bc68 | 0xd6 |
SetFilePointerEx | 0x0 | 0x423058 | 0x2ce6c | 0x2bc6c | 0x467 |
MoveFileExW | 0x0 | 0x42305c | 0x2ce70 | 0x2bc70 | 0x360 |
CopyFileW | 0x0 | 0x423060 | 0x2ce74 | 0x2bc74 | 0x75 |
GlobalAlloc | 0x0 | 0x423064 | 0x2ce78 | 0x2bc78 | 0x2b3 |
GlobalFree | 0x0 | 0x423068 | 0x2ce7c | 0x2bc7c | 0x2ba |
CreateDirectoryW | 0x0 | 0x42306c | 0x2ce80 | 0x2bc80 | 0x81 |
FindFirstFileW | 0x0 | 0x423070 | 0x2ce84 | 0x2bc84 | 0x139 |
FindFirstVolumeW | 0x0 | 0x423074 | 0x2ce88 | 0x2bc88 | 0x13f |
GetCommandLineW | 0x0 | 0x423078 | 0x2ce8c | 0x2bc8c | 0x187 |
FindNextFileW | 0x0 | 0x42307c | 0x2ce90 | 0x2bc90 | 0x145 |
GetCurrentProcess | 0x0 | 0x423080 | 0x2ce94 | 0x2bc94 | 0x1c0 |
InterlockedCompareExchange | 0x0 | 0x423084 | 0x2ce98 | 0x2bc98 | 0x2e9 |
InterlockedDecrement | 0x0 | 0x423088 | 0x2ce9c | 0x2bc9c | 0x2eb |
WaitForMultipleObjects | 0x0 | 0x42308c | 0x2cea0 | 0x2bca0 | 0x4f7 |
GetEnvironmentVariableW | 0x0 | 0x423090 | 0x2cea4 | 0x2bca4 | 0x1dc |
FindClose | 0x0 | 0x423094 | 0x2cea8 | 0x2bca8 | 0x12e |
GetFileAttributesW | 0x0 | 0x423098 | 0x2ceac | 0x2bcac | 0x1ea |
GetCurrentThreadId | 0x0 | 0x42309c | 0x2ceb0 | 0x2bcb0 | 0x1c5 |
ResumeThread | 0x0 | 0x4230a0 | 0x2ceb4 | 0x2bcb4 | 0x413 |
SetFileAttributesW | 0x0 | 0x4230a4 | 0x2ceb8 | 0x2bcb8 | 0x461 |
GetLogicalDriveStringsW | 0x0 | 0x4230a8 | 0x2cebc | 0x2bcbc | 0x208 |
lstrcatW | 0x0 | 0x4230ac | 0x2cec0 | 0x2bcc0 | 0x53f |
InterlockedExchangeAdd | 0x0 | 0x4230b0 | 0x2cec4 | 0x2bcc4 | 0x2ed |
GetSystemInfo | 0x0 | 0x4230b4 | 0x2cec8 | 0x2bcc8 | 0x273 |
CreateThread | 0x0 | 0x4230b8 | 0x2cecc | 0x2bccc | 0xb5 |
SetVolumeMountPointW | 0x0 | 0x4230bc | 0x2ced0 | 0x2bcd0 | 0x4ab |
FindVolumeClose | 0x0 | 0x4230c0 | 0x2ced4 | 0x2bcd4 | 0x150 |
CreateProcessW | 0x0 | 0x4230c4 | 0x2ced8 | 0x2bcd8 | 0xa8 |
GetVolumePathNamesForVolumeNameW | 0x0 | 0x4230c8 | 0x2cedc | 0x2bcdc | 0x2ad |
lstrcpyW | 0x0 | 0x4230cc | 0x2cee0 | 0x2bce0 | 0x548 |
InterlockedIncrement | 0x0 | 0x4230d0 | 0x2cee4 | 0x2bce4 | 0x2ef |
FindNextVolumeW | 0x0 | 0x4230d4 | 0x2cee8 | 0x2bce8 | 0x14a |
lstrcmpiW | 0x0 | 0x4230d8 | 0x2ceec | 0x2bcec | 0x545 |
GetDriveTypeW | 0x0 | 0x4230dc | 0x2cef0 | 0x2bcf0 | 0x1d3 |
ReadFile | 0x0 | 0x4230e0 | 0x2cef4 | 0x2bcf4 | 0x3c0 |
EnterCriticalSection | 0x0 | 0x4230e4 | 0x2cef8 | 0x2bcf8 | 0xee |
WriteFile | 0x0 | 0x4230e8 | 0x2cefc | 0x2bcfc | 0x525 |
InitializeCriticalSectionAndSpinCount | 0x0 | 0x4230ec | 0x2cf00 | 0x2bd00 | 0x2e3 |
LeaveCriticalSection | 0x0 | 0x4230f0 | 0x2cf04 | 0x2bd04 | 0x339 |
SetFilePointer | 0x0 | 0x4230f4 | 0x2cf08 | 0x2bd08 | 0x466 |
DeleteCriticalSection | 0x0 | 0x4230f8 | 0x2cf0c | 0x2bd0c | 0xd1 |
lstrcpynA | 0x0 | 0x4230fc | 0x2cf10 | 0x2bd10 | 0x54a |
GetComputerNameW | 0x0 | 0x423100 | 0x2cf14 | 0x2bd14 | 0x18f |
GetSystemTime | 0x0 | 0x423104 | 0x2cf18 | 0x2bd18 | 0x277 |
FlushFileBuffers | 0x0 | 0x423108 | 0x2cf1c | 0x2bd1c | 0x157 |
WriteConsoleW | 0x0 | 0x42310c | 0x2cf20 | 0x2bd20 | 0x524 |
GetConsoleMode | 0x0 | 0x423110 | 0x2cf24 | 0x2bd24 | 0x1ac |
GetConsoleCP | 0x0 | 0x423114 | 0x2cf28 | 0x2bd28 | 0x19a |
CloseHandle | 0x0 | 0x423118 | 0x2cf2c | 0x2bd2c | 0x52 |
InterlockedFlushSList | 0x0 | 0x42311c | 0x2cf30 | 0x2bd30 | 0x2ee |
UnmapViewOfFile | 0x0 | 0x423120 | 0x2cf34 | 0x2bd34 | 0x4d6 |
CreateFileW | 0x0 | 0x423124 | 0x2cf38 | 0x2bd38 | 0x8f |
lstrlenA | 0x0 | 0x423128 | 0x2cf3c | 0x2bd3c | 0x54d |
lstrcpynW | 0x0 | 0x42312c | 0x2cf40 | 0x2bd40 | 0x54b |
lstrlenW | 0x0 | 0x423130 | 0x2cf44 | 0x2bd44 | 0x54e |
QueryPerformanceCounter | 0x0 | 0x423134 | 0x2cf48 | 0x2bd48 | 0x3a7 |
Sleep | 0x0 | 0x423138 | 0x2cf4c | 0x2bd4c | 0x4b2 |
QueryPerformanceFrequency | 0x0 | 0x42313c | 0x2cf50 | 0x2bd50 | 0x3a8 |
lstrcatA | 0x0 | 0x423140 | 0x2cf54 | 0x2bd54 | 0x53e |
GetProcessHeap | 0x0 | 0x423144 | 0x2cf58 | 0x2bd58 | 0x24a |
SetStdHandle | 0x0 | 0x423148 | 0x2cf5c | 0x2bd5c | 0x487 |
SetEnvironmentVariableA | 0x0 | 0x42314c | 0x2cf60 | 0x2bd60 | 0x456 |
FreeEnvironmentStringsW | 0x0 | 0x423150 | 0x2cf64 | 0x2bd64 | 0x161 |
GetEnvironmentStringsW | 0x0 | 0x423154 | 0x2cf68 | 0x2bd68 | 0x1da |
GetCommandLineA | 0x0 | 0x423158 | 0x2cf6c | 0x2bd6c | 0x186 |
UnhandledExceptionFilter | 0x0 | 0x42315c | 0x2cf70 | 0x2bd70 | 0x4d3 |
SetUnhandledExceptionFilter | 0x0 | 0x423160 | 0x2cf74 | 0x2bd74 | 0x4a5 |
TerminateProcess | 0x0 | 0x423164 | 0x2cf78 | 0x2bd78 | 0x4c0 |
IsProcessorFeaturePresent | 0x0 | 0x423168 | 0x2cf7c | 0x2bd7c | 0x304 |
GetCurrentProcessId | 0x0 | 0x42316c | 0x2cf80 | 0x2bd80 | 0x1c1 |
GetSystemTimeAsFileTime | 0x0 | 0x423170 | 0x2cf84 | 0x2bd84 | 0x279 |
IsDebuggerPresent | 0x0 | 0x423174 | 0x2cf88 | 0x2bd88 | 0x300 |
GetStartupInfoW | 0x0 | 0x423178 | 0x2cf8c | 0x2bd8c | 0x263 |
GetModuleHandleW | 0x0 | 0x42317c | 0x2cf90 | 0x2bd90 | 0x218 |
RtlUnwind | 0x0 | 0x423180 | 0x2cf94 | 0x2bd94 | 0x418 |
SetLastError | 0x0 | 0x423184 | 0x2cf98 | 0x2bd98 | 0x473 |
TlsAlloc | 0x0 | 0x423188 | 0x2cf9c | 0x2bd9c | 0x4c5 |
TlsGetValue | 0x0 | 0x42318c | 0x2cfa0 | 0x2bda0 | 0x4c7 |
TlsSetValue | 0x0 | 0x423190 | 0x2cfa4 | 0x2bda4 | 0x4c8 |
TlsFree | 0x0 | 0x423194 | 0x2cfa8 | 0x2bda8 | 0x4c6 |
FreeLibrary | 0x0 | 0x423198 | 0x2cfac | 0x2bdac | 0x162 |
GetProcAddress | 0x0 | 0x42319c | 0x2cfb0 | 0x2bdb0 | 0x245 |
LoadLibraryExW | 0x0 | 0x4231a0 | 0x2cfb4 | 0x2bdb4 | 0x33e |
RaiseException | 0x0 | 0x4231a4 | 0x2cfb8 | 0x2bdb8 | 0x3b1 |
GetModuleHandleExW | 0x0 | 0x4231a8 | 0x2cfbc | 0x2bdbc | 0x217 |
GetStdHandle | 0x0 | 0x4231ac | 0x2cfc0 | 0x2bdc0 | 0x264 |
GetModuleFileNameA | 0x0 | 0x4231b0 | 0x2cfc4 | 0x2bdc4 | 0x213 |
MultiByteToWideChar | 0x0 | 0x4231b4 | 0x2cfc8 | 0x2bdc8 | 0x367 |
WideCharToMultiByte | 0x0 | 0x4231b8 | 0x2cfcc | 0x2bdcc | 0x511 |
ExitProcess | 0x0 | 0x4231bc | 0x2cfd0 | 0x2bdd0 | 0x119 |
GetACP | 0x0 | 0x4231c0 | 0x2cfd4 | 0x2bdd4 | 0x168 |
HeapAlloc | 0x0 | 0x4231c4 | 0x2cfd8 | 0x2bdd8 | 0x2cb |
HeapFree | 0x0 | 0x4231c8 | 0x2cfdc | 0x2bddc | 0x2cf |
CompareStringW | 0x0 | 0x4231cc | 0x2cfe0 | 0x2bde0 | 0x64 |
LCMapStringW | 0x0 | 0x4231d0 | 0x2cfe4 | 0x2bde4 | 0x32d |
GetFileType | 0x0 | 0x4231d4 | 0x2cfe8 | 0x2bde8 | 0x1f3 |
HeapReAlloc | 0x0 | 0x4231d8 | 0x2cfec | 0x2bdec | 0x2d2 |
HeapSize | 0x0 | 0x4231dc | 0x2cff0 | 0x2bdf0 | 0x2d4 |
GetStringTypeW | 0x0 | 0x4231e0 | 0x2cff4 | 0x2bdf4 | 0x269 |
WaitForSingleObject | 0x0 | 0x4231e4 | 0x2cff8 | 0x2bdf8 | 0x4f9 |
GetExitCodeProcess | 0x0 | 0x4231e8 | 0x2cffc | 0x2bdfc | 0x1df |
CreateProcessA | 0x0 | 0x4231ec | 0x2d000 | 0x2be00 | 0xa4 |
GetFileAttributesExW | 0x0 | 0x4231f0 | 0x2d004 | 0x2be04 | 0x1e7 |
FindFirstFileExA | 0x0 | 0x4231f4 | 0x2d008 | 0x2be08 | 0x133 |
FindNextFileA | 0x0 | 0x4231f8 | 0x2d00c | 0x2be0c | 0x143 |
IsValidCodePage | 0x0 | 0x4231fc | 0x2d010 | 0x2be10 | 0x30a |
GetOEMCP | 0x0 | 0x423200 | 0x2d014 | 0x2be14 | 0x237 |
GetCPInfo | 0x0 | 0x423204 | 0x2d018 | 0x2be18 | 0x172 |
DecodePointer | 0x0 | 0x423208 | 0x2d01c | 0x2be1c | 0xca |
USER32.dll (2)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
wsprintfW | 0x0 | 0x423230 | 0x2d044 | 0x2be44 | 0x333 |
wsprintfA | 0x0 | 0x423234 | 0x2d048 | 0x2be48 | 0x332 |
ADVAPI32.dll (11)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
RegSetValueExW | 0x0 | 0x423000 | 0x2ce14 | 0x2bc14 | 0x27e |
RegCloseKey | 0x0 | 0x423004 | 0x2ce18 | 0x2bc18 | 0x230 |
RegCreateKeyW | 0x0 | 0x423008 | 0x2ce1c | 0x2bc1c | 0x23c |
RegDeleteValueW | 0x0 | 0x42300c | 0x2ce20 | 0x2bc20 | 0x248 |
RegOpenKeyW | 0x0 | 0x423010 | 0x2ce24 | 0x2bc24 | 0x264 |
LookupPrivilegeValueW | 0x0 | 0x423014 | 0x2ce28 | 0x2bc28 | 0x197 |
AdjustTokenPrivileges | 0x0 | 0x423018 | 0x2ce2c | 0x2bc2c | 0x1f |
OpenProcessToken | 0x0 | 0x42301c | 0x2ce30 | 0x2bc30 | 0x1f7 |
CryptAcquireContextW | 0x0 | 0x423020 | 0x2ce34 | 0x2bc34 | 0xb1 |
CryptGenRandom | 0x0 | 0x423024 | 0x2ce38 | 0x2bc38 | 0xc1 |
CryptReleaseContext | 0x0 | 0x423028 | 0x2ce3c | 0x2bc3c | 0xcb |
SHELL32.dll (3)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
SHChangeNotify | 0x0 | 0x423220 | 0x2d034 | 0x2be34 | 0x7f |
CommandLineToArgvW | 0x0 | 0x423224 | 0x2d038 | 0x2be38 | 0x6 |
ShellExecuteExW | 0x0 | 0x423228 | 0x2d03c | 0x2be3c | 0x121 |
MPR.dll (3)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
WNetCloseEnum | 0x0 | 0x423210 | 0x2d024 | 0x2be24 | 0x10 |
WNetEnumResourceW | 0x0 | 0x423214 | 0x2d028 | 0x2be28 | 0x1c |
WNetOpenEnumW | 0x0 | 0x423218 | 0x2d02c | 0x2be2c | 0x3d |
Memory Dumps (1)
»
Name | Process ID | Start VA | End VA | Dump Reason | PE Rebuilds | Bitness | Entry Points | AV | YARA | Actions |
---|---|---|---|---|---|---|---|---|---|---|
tiger4444.exe | 1 | 0x00010000 | 0x00057FFF | Relevant Image | - | 32-bit | - |
![]() |
![]() |
...
|
Local AV Matches (1)
»
Threat Name | Severity |
---|---|
Generic.Ransom.GlobeImposter.285E7A26 |
Malicious
|
C:\Windows10Upgrade\resources\ux\Microsoft.WinJS\js\base.js | Modified File | Text |
Malicious
|
...
|
»
YARA Matches (1)
»
Rule Name | Rule Description | Classification | Severity | Actions |
---|---|---|---|---|
JS_High_Entropy | JavaScript has a high entropy; possible obfuscation | - |
Malicious
|
...
|
C:\Windows10Upgrade\resources\ux\Microsoft.WinJS\js\ui.js | Modified File | Text |
Malicious
|
...
|
»
YARA Matches (1)
»
Rule Name | Rule Description | Classification | Severity | Actions |
---|---|---|---|---|
JS_High_Entropy | JavaScript has a high entropy; possible obfuscation | - |
Malicious
|
...
|
C:\Windows10Upgrade\resources\ux\default_eos.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_ar-sa.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_de-de.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_en-gb.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_es-es.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_et-ee.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_fi-fi.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_fr-ca.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_fr-fr.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_he-il.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_hu-hu.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_it-it.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_ja-jp.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_lv-lv.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_nb-no.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_pl-pl.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_pt-pt.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_th-th.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_zh-tw.htm | Modified File | Text |
Unknown
|
...
|
»
C:\Windows10Upgrade\bootsect.exe | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\DW20.EXE | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\DWTRIG20.EXE | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\EnableWiFiTracing.cmd | Modified File | Unknown |
Not Queried
|
...
|
»
C:\Windows10Upgrade\GatherOSState.EXE | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\GetCurrentRollback.EXE | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\HttpHelper.exe | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\PostOOBEScript.cmd | Modified File | Unknown |
Not Queried
|
...
|
»
C:\Windows10Upgrade\upgrader_default.log | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\upgrader_win10.log | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\Windows10UpgraderApp.exe | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\WinREBootApp32.exe | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\WinREBootApp64.exe | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\hwcompatShared.txt | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\block.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\bluelogo.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\bullet.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\default.css | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\default.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\default_eos.css | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\default_oobe.css | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\default_oobe.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\eula.css | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\GetStarted.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\GetStartedHoverOver.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\loading.gif | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\lock.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\logo.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\marketing.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\NetworkIssueFAQ.mht | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\NoNetworkConnection.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\NoNetworkConnectionHoverOver.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\pass.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\Microsoft.WinJS\css\oobe-desktop.css | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\Microsoft.WinJS\css\ui-dark.css | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_bg-bg.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_cs-cz.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_da-dk.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_el-gr.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_en-us.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_es-mx.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_hr-hr.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_ko-kr.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_lt-lt.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_nl-nl.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_pt-br.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_ro-ro.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_ru-ru.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_sk-sk.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_sl-si.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_sr-latn-cs.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_sv-se.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_tr-tr.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_uk-ua.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_zh-cn.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\ux\EULA\EULA_zh-hk.htm | Modified File | Text |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\amd64\BiosBlocks.xml | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\amd64\hwcompat.txt | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\amd64\hwexclude.txt | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\amd64\nxquery.cat | Modified File | Stream |
Not Queried
|
...
|
»
C:\Windows10Upgrade\resources\amd64\nxquery.inf | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\Public\Libraries\RecordedTV.library-ms | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\2NnCc4KzPlFvi.swf | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\5K6QHDJbfIWjYG262dir.avi | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\ccn85Ai_.mp4 | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\nZxJYVmIXHGhm.flv | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\ofQy-RjpJsOl2h.avi | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\s9NfPDdsE6nhezSDza.flv | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\XZJL mjrH9\b70zp1nV4_RX.flv | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\PdDH9giHo14Og6\9v2jkjY15yj.mp4 | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\PdDH9giHo14Og6\Aksfbq.flv | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\PdDH9giHo14Og6\CokPtPcir1Km9h.swf | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\PdDH9giHo14Og6\FFQYJepVdSMrceUSp.flv | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\PdDH9giHo14Og6\JKXNIWeQxs8Bq.swf | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\PdDH9giHo14Og6\NfDZ9FmKUznX7QjqQB0.flv | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\PdDH9giHo14Og6\OKe9Vwu AXHg.avi | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\PdDH9giHo14Og6\Ox_K.flv | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\J4la1r gmDnAcszsLl\flFRhosiB.flv | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\J4la1r gmDnAcszsLl\LRb2X8JvR7dXd5G2QS.avi | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\J4la1r gmDnAcszsLl\MOuupnQy6t5YPt.avi | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\J4la1r gmDnAcszsLl\xBzkCKlaqOVT0MjkjP6.mp4 | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\B0M8WjsC5SrNW4C-0\82zMDESjlfgM7otH 3.avi | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\B0M8WjsC5SrNW4C-0\JCuda3TbU9_aKKvhOer.flv | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\B0M8WjsC5SrNW4C-0\qkjB9QUudeJrk jkCRq.flv | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\B0M8WjsC5SrNW4C-0\rjtTtY.flv | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\B0M8WjsC5SrNW4C-0\X xmY.flv | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\1GssRSL s5Lr83\K8H_yKdZxq7njjSb.mkv | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\1GssRSL s5Lr83\TaaSYvvFHS17rq.mp4 | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\1GssRSL s5Lr83\_Vz8dSb7ILROS.flv | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Videos\1GssRSL s5Lr83\ZcGza_BmC\wyauoDThVWGo4KOPbrPe.flv | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Searches\winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\0P3NBwM7Yaa5LdwVnoJJ.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\3WV0Ls jiLUSjUUco.gif | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\5_uNa_SA36f77jy3w2Gv.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\6iyFgn9SrZHQ KGFU.gif | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\8IrExsVsSnK3.jpg | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\8ZHyFqvR363JEtV.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\C876_Q.gif | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\ES -V29.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\f5nrkb2LotgtwH.gif | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\FCOwn.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\FgcCERd5K.gif | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\fJ6HL8oLrkhks9adl.jpg | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\gTPmnYJT.gif | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\hsN3S _.jpg | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\Hsyb4EvKfZDCo8.gif | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\i2jPXe_5_EmayX-juQ.jpg | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\iJsVEnd5y-jq2.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\iKlWqFav.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\JHLKfbZ_wnxI.jpg | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\jTcjMuk8-c84cV.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\LkpzuM_D0mU.jpg | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\M6y8KiMnNaGEd1.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\N0NZDmMYf0H.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\nqh87aP.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\qnFyF6.gif | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\QYkN2xzet.jpg | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\rL58t9UpNE.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\sg1EYYvYbFWAigsa.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\Sghof7ewON_UNTJ3.jpg | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\SJe4.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\snTK_4Hws.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\tbI35.png | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\ugR0riRG8ulCowNjMAqj.jpg | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\xAWhA3CWoiGQ4.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\Xs85b.gif | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\YJvAER.gif | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\zkGa22a5xC9Cll9U.gif | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Pictures\_gki25reI.bmp | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\14B5f5HX.m4a | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\epqIgxA0WzcL_N3FRi.m4a | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\ivAqh4BdXoB0En.m4a | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\pKN8kzf02i2Z-2YwQdYf.mp3 | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\XaND DoJCBA3Xf.mp3 | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\_MAxegZNMc9ssCROLe\rsJ9UPU.wav | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\_MAxegZNMc9ssCROLe\wXxWLXtHA6IWwzbkTvK.m4a | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\yxGMwmgC\dOlY5mI8x96ejt4.m4a | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\yxGMwmgC\hqVpFTG9IIW eeHIf0.wav | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\yxGMwmgC\iyvNor3BCpFxS.mp3 | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\yxGMwmgC\T4BI1N3Y4nE.m4a | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\yxGMwmgC\IUdpHuiNoyTnhg6M\b1MCgDF7JU.wav | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\yxGMwmgC\IUdpHuiNoyTnhg6M\RZMqfkHjGC7Ywnfi.wav | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\yxGMwmgC\IUdpHuiNoyTnhg6M\_9r81igxQbjAOcgmhEV.wav | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\2FpKVPISO.mp3 | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\5pycqsYyh9jtXU4a.mp3 | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\926rqjMJjcledBP-.m4a | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\H9vaiExm-o.mp3 | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\OUfb1R.wav | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\u3Lej26cURF7pFaUavmI.wav | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\X9wKF.m4a | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\Ylq3.m4a | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\Wfhv\cJ70uWo2V.m4a | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\Wfhv\gNF41DnE96kMsiC.mp3 | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\Wfhv\Z2GhDV1FaIXkNy.m4a | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\NV_iQ\9oZvTZiqj1T2ND.wav | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\NV_iQ\osWp2.mp3 | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\NV_iQ\U_ga_WJrGJ-jDmjIG.wav | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\nK_uPGc\fRm4zP.wav | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\nK_uPGc\FSplmPyv3.m4a | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\nK_uPGc\YWaVCyXnxBoBbdx.m4a | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\nK_uPGc\_MbUJDIbnNB86DdwXKQn.wav | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\nK_uPGc\PkaVAmyKozGT3xgCy\geOqCbV8uwQiJY9.mp3 | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\nK_uPGc\PkaVAmyKozGT3xgCy\PKDoJjf.mp3 | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\nK_uPGc\PkaVAmyKozGT3xgCy\vRwHl.m4a | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\JvO3tXgHMCsM-\D1biJ0M12k7D5tV.mp3 | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\JvO3tXgHMCsM-\FGCqab 6Q9IrvSbP.mp3 | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Music\HuzlkTkcHCiJS8Zqd\JvO3tXgHMCsM-\Oddm UVF74ixYdV9S.m4a | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Favorites\Bing.url | Modified File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Documents\3 jiOxfC.xlsx | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Documents\cuZF8zNtkH1ph ibNaP.docx | Modified File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Documents\Database1.accdb | Modified File | Stream |
Not Queried
|
...
|
»
C:\ProgramData\share\.BFC0E91B00AE8A0620D3 | Dropped File | Stream |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\Users\FD1HVy\Desktop\ids.txt | Dropped File | Text |
Not Queried
|
...
|
»
C:\ProgramData\local\.BFC0E91B00AE8A0620D3 | Dropped File | Stream |
Not Queried
|
...
|
»