5ff8a87f...55e7 | IOCs
Logo
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification:
Exploit
Dropper
Downloader
...
Threat Names:
AZORult v3
Exploit.RTF-ObfsObjDat.Gen
Trojan.PWS.Delf.INS

API .doc.rtf

RTF Document

Created at 2020-11-10T00:49:00

...

Indicators

File (438)
»
Filename Hash Operations Category Severity
C:\Users\aETAdzjz\Desktop\API .doc.rtf MD5: 1cc146d47918d23cee86a97c77f87918
SHA1: 3d07f8db1010627f1481b5fde714185215971935
SHA256: 5ff8a87fd7626d4beab7a5be7f285f1d1d64478509f27aca6fd9deb3f69155e7
SSDeep: 12288:lUykCSZQeSdPLHNHgdvb0INuK8afD7Gj7qqtisK1yty+79mmUE7evpp:hsQeS9Hpg7ear7GXZgTvmUwup
ImpHash: - 		Sample File
Malicious
1932d8c415f078ca690f84b2a7ec372d03ff32beb804629619fe3775e7850099 MD5: 86a42d3b113836c1c1479970288f1b11
SHA1: 4dfa181dde8c5ba010cb2a0d6d8a74a835a1ddd7
SHA256: 1932d8c415f078ca690f84b2a7ec372d03ff32beb804629619fe3775e7850099
SSDeep: 3:wcaJHofQdXDk1h2caCi20f6fATikiub78Dv:wcaJofQdXQecH0f64QO8Dv
ImpHash: - 		Downloaded File
Unknown
C:\Users\aETAdzjz\AppData\Local\Temp\182004765502204915563913.tmp MD5: a031e9d545551a24e4c77344f84539d4
SHA1: db8b3fd502f0953c7a28e71b75e8c06a460a7449
SHA256: fe117e2f56177afe116cd747fe1df06d60f4ab5e324530f8fbdcecb826e63e1c
SSDeep: 24:LLi4N0KL7G0TMJHUyyJtmCm0XKY6lOKQAE9V8MffD4fOzeCmly6UwcpYMQW:zNz+JH3yJUheCVE9V8MX0PFlNU1uW
ImpHash: - 		Access, Create, Delete, Read Dropped File
Unknown
C:\Users\aETAdzjz\AppData\Local\Temp\182029721896254689506701.tmp MD5: 6389834774166f7a20359003254939f2
SHA1: 7b996a476a9f7fe763ab19c39d3dc318966d18b8
SHA256: 23b1cf9e40b9ba27ec7eb7cd01b4609e4418aba063275fb2a0aebcf28f8f8620
SSDeep: 96:Dbn5HKlV8/VDHLRilOhFTFf6FdqA9LJp6Y/e2DkrGJ6hmCcaLeU8ukONPk7iriQ:3n5HKEnhTFiPsvW7iri
ImpHash: - 		Access, Create, Delete, Read Dropped File
Unknown
C:\Users\aETAdzjz\AppData\Local\Temp\182031289079242754423543.tmp MD5: f167061aa11d4d88bce348a7704db935
SHA1: 5806e2ac52fe48573dca9b2ac8e4504d7d781b6e
SHA256: 5be8fbb1985582aa220e9bb5d8781c4e3c21206e31cff7f911cdb2fbbed1acb9
SSDeep: 96:GKuNQIoYnMvqyWx7pnqH+w/fVIrECuKdPraBdUDBBVWqwmKT/WTPepeWbtxY:tJkMvuzzTP6bt
ImpHash: - 		Access, Create, Delete, Read Dropped File
Unknown
C:\Users\aETAdzjz\AppData\Local\Temp\182032848139586271779370.tmp MD5: b8f205f9f2dbf68c60dcfc3df3e9053d
SHA1: 1581961d4cf6f304fbe88233d7017f9e71b6b4e4
SHA256: c20353043062ed74b77a57e471bf4293b7e57b9b51942a2616c25dc16a9e7e20
SSDeep: 12:DBl/Zed12Of5LZWfY0xpMujuHWMu6N2OHjWOzMbdym/eRgBoQFmgW2FOmO6Mz6LX:DLZs1x7WxHaiSlMxosJF/Ezo
ImpHash: - 		Access, Create, Delete, Read Dropped File
Unknown
C:\Users\aETAdzjz\AppData\Local\Temp\182033787308292230589271.tmp MD5: 1d0658e804791ee90258526373d8e5c4
SHA1: 5ed7e68d094e2a41fca037f9ec12698213c49976
SHA256: b00114acc920b170147d1a11b5272f210fd1bb8033ee0c7a072680508d1ee305
SSDeep: 48:T9aC3BdjNPp+suktLReRK+nVaNU74ePLrL2Iua6maxNPM5ETQTcrQHIvYysX0jpi:RVdvUVaN+LrL2IlLvU+kYysX0j4t
ImpHash: - 		Access, Create, Delete, Read Dropped File
Unknown
C:\Users\aETAdzjz\AppData\Local\Temp\2035036576518928862638.tmp MD5: 4217fd1f9c0d91c9d57cc6767f58c0b5
SHA1: 91f3008494f3a842a5b59319c5a75e15ff6c405e
SHA256: c2b933557ca7812205a57a0f724cdb464e7b06cbbb77a657fb337c0307e888c8
SSDeep: 384:QS+qYFlfk44jGaCvySv3Lxj0eu1Du1ju1Uu1Evdj44V/Dd:1+qYj+cF3LxgYD
ImpHash: - 		Access, Create, Delete, Read Dropped File
Unknown
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\\aetadzjz@live[2].txt MD5: 0755beab2e195850485c6aa4fd79870a
SHA1: 6f6d35a033e466749b8fd1574d7827a91faaa82c
SHA256: 58f82370f5b62c631e96b51171d2264c4c759be04bb111ab29f26c6d96e08952
SSDeep: 3:vpqMLJUQ2W0cpStcwVTdD:vEMWXbc8tZhp
ImpHash: - 		Access, Read Dropped File
Unknown
C:\Users\aETAdzjz\AppData\Roaming\fghvhghvgfdgfhchfg.exe MD5: 60b900594c282fd33198488327e5fa32
SHA1: 3814214b06d827b877a6a23944f53720d3682ecd
SHA256: e000b0cae7df0753ea12d97175e393bacf905613eef1a59d7e1784a913993f58
SSDeep: 768:Ak9YyFYxwLT2qDk/BRB6FRutiSiHQ6orjcvYGfQjq89Zh116RS2CuD9CbVJsgY6L:j5hf2qgB67uUS+Q6XajRhr6Rs8oyDT+
ImpHash: - 		Access, Create, Delete Downloaded File
Unknown
Equation3_1 MD5: 0de20195a34bb53aeec70f622a926f6d
SHA1: f02975c3c5d386975ad1e662f094b7cc077a73cf
SHA256: 2cade4fc6b55395aa4bc691c03755e609bdb1b25b82750d2046929b6d39ca251
SSDeep: 6144:0DKVMHO3ZKWEZkBetYMIx2SBD7VIXng1dNQ13Si6u4er12v1vTUX7zP7RFk9O73n:0DKVF3wWoNtNE3BPeXgQ1MGp3kYTP9eu
ImpHash: - 		Embedded File
Unknown
bb7c277a1ea7a3bb3882861f8571185ee64edbf10e837b2010361380139f5444 MD5: 0fc9ece6a952fb99876dc1c0ed720b24
SHA1: 99ef5a5fac0807bce8a5164d0c2e4dca012b0fcc
SHA256: bb7c277a1ea7a3bb3882861f8571185ee64edbf10e837b2010361380139f5444
SSDeep: 3:oqu:oV
ImpHash: - 		Downloaded File
Unknown
d6dcb74ede20ce104e6cf1b52dd5551105feaf027401ef34d7ca5a5d3333fa95 MD5: 7c342898a34f5fc5ce6dd147f5492427
SHA1: 681bf1e0ca4394c89d68d2b5ad1f75f4e54e04b1
SHA256: d6dcb74ede20ce104e6cf1b52dd5551105feaf027401ef34d7ca5a5d3333fa95
SSDeep: 49152:y9zgkv58gK28UBvyFfYELWcLPik69kBREGr1YdgIVWfo74T+BP3E:EFRUaaqnG5ihETCP3E
ImpHash: - 		Downloaded File
Unknown
db997093559061c627f0580b0046fbc6c93be52f6bb3056c17688ab60ea3e729 MD5: 8e99b89611a54ea10706d3abcabf3b99
SHA1: eed8a788db31c39463e24e1f0197f366700fafca
SHA256: db997093559061c627f0580b0046fbc6c93be52f6bb3056c17688ab60ea3e729
SSDeep: 3072:55B4b9jFsfD22PXsE7TxKRGvgkKkGAkVzM5yrUk75TCpKhs9:osFkKdKRIhKtAkVzM5yrUkha
ImpHash: - 		Downloaded File
Unknown
C:\Users\aETAdzjz\AppData\Local\Temp\182029721896254689506701.tmp-wal MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SSDeep: 3::
ImpHash: - 		Access, Create, Delete
Not Queried
C:\Users\aETAdzjz\AppData\Local\Temp\182028482867542631482656.tmp MD5: 4a755de35d5f03cd209e9f5725fe92b5
SHA1: 08ad49071afdb4c2b095c6bcb07336ab2f267387
SHA256: aecd0296f38fa691e15177c5fe550172c938c61036a910bf05e8f71faa2b442d
SSDeep: 24:TLEag/5UcJOyTGVZTPaFpEvg3obNmCFk6Uwcc85fB:ToR/ecVTgPOpEveoJZFrU1cQB
ImpHash: - 		Access, Create, Delete, Read Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\182029721896254689506701.tmp-shm MD5: b7c14ec6110fa820ca6b65f5aec85911
SHA1: 608eeb7488042453c9ca40f7e1398fc1a270f3f4
SHA256: fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
SSDeep: 3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
ImpHash: - 		Access, Create, Delete Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-console-l1-1-0.dll MD5: 502263c56f931df8440d7fd2fa7b7c00
SHA1: 523a3d7c3f4491e67fc710575d8e23314db2c1a2
SHA256: 94a5df1227818edbfd0d5091c6a48f86b4117c38550343f780c604eee1cd6231
SSDeep: 192:3jBMWIghWGZiKedXe123Ouo+Uggs/nGfe4pBjS/uBmWh0txKdmVWQ4GWDZoiyqnP:GWPhWVXYi00GftpBjSemTltcwpS
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-datetime-l1-1-0.dll MD5: cb978304b79ef53962408c611dfb20f5
SHA1: eca42f7754fb0017e86d50d507674981f80bc0b9
SHA256: 90fae0e7c3644a6754833c42b0ac39b6f23859f9a7cf4b6c8624820f59b9dad3
SSDeep: 192:RWIghWG4U9xluZo123Ouo+Uggs/nGfe4pBjSbMDPxVWh0txKdmVWQ4CWrDry6qnZ:RWPhWFv0i00GftpBjBHem6plUG+zIw
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-debug-l1-1-0.dll MD5: 88ff191fd8648099592ed28ee6c442a5
SHA1: 6a4f818b53606a5602c609ec343974c2103bc9cc
SHA256: c310cc91464c9431ab0902a561af947fa5c973925ff70482d3de017ed3f73b7d
SSDeep: 384:cWPhWM4Ri00GftpBj2YILemtclD16PaEC:l10oiBQe/L
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-errorhandling-l1-1-0.dll MD5: 6d778e83f74a4c7fe4c077dc279f6867
SHA1: f5d9cf848f79a57f690da9841c209b4837c2e6c3
SHA256: a97dcca76cdb12e985dff71040815f28508c655ab2b073512e386dd63f4da325
SSDeep: 192:NFmxD3PWIghWGJY/luZo123Ouo+Uggs/nGfe4pBjSffcp8Wh0txKdmVWQ4yWRzOr:NFkWPhW60i00GftpBj4emHlD16Pa7v
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-file-l1-1-0.dll MD5: 94ae25c7a5497ca0be6882a00644ca64
SHA1: f7ac28bbc47e46485025a51eeb6c304b70cee215
SHA256: 7ea06b7050f9ea2bcc12af34374bdf1173646d4e5ebf66ad690b37f4df5f3d4e
SSDeep: 384:d6PvVXHWPhWnsnhi00GftpBjaJemyDlD16PamW8:UPvVX85nhoisJeLt8
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-file-l1-2-0.dll MD5: e2f648ae40d234a3892e1455b4dbbe05
SHA1: d9d750e828b629cfb7b402a3442947545d8d781b
SHA256: c8c499b012d0d63b7afc8b4ca42d6d996b2fcf2e8b5f94cacfbec9e6f33e8a03
SSDeep: 192:IWIghWGJnWdsNtL/123Ouo+Uggs/nGfe4pBjSfcD63QXWh0txKdmVWQ4yW1rwqnh:IWPhWlsnhi00GftpBjnem9lD16PamFP
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-file-l2-1-0.dll MD5: e479444bdd4ae4577fd32314a68f5d28
SHA1: 77edf9509a252e886d4da388bf9c9294d95498eb
SHA256: c85dc081b1964b77d289aac43cc64746e7b141d036f248a731601eb98f827719
SSDeep: 192:BZwWIghWG4U9ydsNtL/123Ouo+Uggs/nGfe4pBjSbUGHvNWh0txKdmVWQ4CWVU9h:UWPhWFBsnhi00GftpBjKvxemPlP55QQ7
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-handle-l1-1-0.dll MD5: 6db54065b33861967b491dd1c8fd8595
SHA1: ed0938bbc0e2a863859aad64606b8fc4c69b810a
SHA256: 945cc64ee04b1964c1f9fcdc3124dd83973d332f5cfb696cdf128ca5c4cbd0e5
SSDeep: 384:AWPhWXDz6i00GftpBj5FrFaemx+lDbNh/6:hroidkeppp
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-heap-l1-1-0.dll MD5: 2ea3901d7b50bf6071ec8732371b821c
SHA1: e7be926f0f7d842271f7edc7a4989544f4477da7
SHA256: 44f6df4280c8ecc9c6e609b1a4bfee041332d337d84679cfe0d6678ce8f2998a
SSDeep: 192:GElqWIghWGZi5edXe123Ouo+Uggs/nGfe4pBjS/PHyRWh0txKdmVWQ4GWC2w4Dj3:GElqWPhWCXYi00GftpBjP9emYXlDbNs
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-interlocked-l1-1-0.dll MD5: d97a1cb141c6806f0101a5ed2673a63d
SHA1: d31a84c1499a9128a8f0efea4230fcfa6c9579be
SHA256: deccd75fc3fc2bb31338b6fe26deffbd7914c6cd6a907e76fd4931b7d141718c
SSDeep: 192:DtiYsFWWIghWGQtu7B123Ouo+Uggs/nGfe4pBjSPiZadcbWh0txKdmVWQ4mWf2FN:5iYsFWWPhWUTi00GftpBjremUBNlgC
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-libraryloader-l1-1-0.dll MD5: d0873e21721d04e20b6ffb038accf2f1
SHA1: 9e39e505d80d67b347b19a349a1532746c1f7f88
SHA256: bb25ccf8694d1fcfce85a7159dcf6985fdb54728d29b021cb3d14242f65909ce
SSDeep: 384:yHvuBL3BmWPhWZTi00GftpBjNKnemenyAlvN9W/L:yWBL3BXYoinKne1yd
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-localization-l1-2-0.dll MD5: eff11130bfe0d9c90c0026bf2fb219ae
SHA1: cf4c89a6e46090d3d8feeb9eb697aea8a26e4088
SHA256: 03ad57c24ff2cf895b5f533f0ecbd10266fd8634c6b9053cc9cb33b814ad5d97
SSDeep: 384:KOMw3zdp3bwjGjue9/0jCRrndbVWPhWIDz6i00GftpBj6cemjlD16Pa+4r:KOMwBprwjGjue9/0jCRrndbCOoireqv
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-memory-l1-1-0.dll MD5: d500d9e24f33933956df0e26f087fd91
SHA1: 6c537678ab6cfd6f3ea0dc0f5abefd1c4924f0c0
SHA256: bb33a9e906a5863043753c44f6f8165afe4d5edb7e55efa4c7e6e1ed90778eca
SSDeep: 384:+bZWPhWUsnhi00GftpBjwBemQlD16Par7:b4nhoi6BedH
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-namedpipe-l1-1-0.dll MD5: 6f6796d1278670cce6e2d85199623e27
SHA1: 8aa2155c3d3d5aa23f56cd0bc507255fc953ccc3
SHA256: c4f60f911068ab6d7f578d449ba7b5b9969f08fc683fd0ce8e2705bbf061f507
SSDeep: 192:pgWIghWGZiBeS123Ouo+Uggs/nGfe4pBjS/fE/hWh0txKdmVWQ4GWoxYyqnaj/6B:iWPhWUEi00GftpBj1temnltcwWB
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-processenvironment-l1-1-0.dll MD5: 5f73a814936c8e7e4a2dfd68876143c8
SHA1: d960016c4f553e461afb5b06b039a15d2e76135e
SHA256: 96898930ffb338da45497be019ae1adcd63c5851141169d3023e53ce4c7a483e
SSDeep: 192:wXjWIghWGd4dsNtL/123Ouo+Uggs/nGfe4pBjSXcYddWh0txKdmVWQ4SW04engo5:MjWPhWHsnhi00GftpBjW7emOj5l1z6hP
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-processthreads-l1-1-0.dll MD5: a2d7d7711f9c0e3e065b2929ff342666
SHA1: a17b1f36e73b82ef9bfb831058f187535a550eb8
SHA256: 9dab884071b1f7d7a167f9bec94ba2bee875e3365603fa29b31de286c6a97a1d
SSDeep: 384:afk1JzNcKSIJWPhW2snhi00GftpBjZqcLvemr4PlgC:RcKST+nhoi/BbeGv
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-processthreads-l1-1-1.dll MD5: d0289835d97d103bad0dd7b9637538a1
SHA1: 8ceebe1e9abb0044808122557de8aab28ad14575
SHA256: 91eeb842973495deb98cef0377240d2f9c3d370ac4cf513fd215857e9f265a6a
SSDeep: 384:xzADfIeRWPhWKEi00GftpBjj1emMVlvN0M:xzfeWeoi11ep
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-profile-l1-1-0.dll MD5: fee0926aa1bf00f2bec9da5db7b2de56
SHA1: f5a4eb3d8ac8fb68af716857629a43cd6be63473
SHA256: 8eb5270fa99069709c846db38be743a1a80a42aa1a88776131f79e1d07cc411c
SSDeep: 192:w9WIghWGdUuDz7M123Ouo+Uggs/nGfe4pBjSXrw58h6Wh0txKdmVWQ4SW7QQtzko:w9WPhWYDz6i00GftpBjXPemD5l1z6hv
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-rtlsupport-l1-1-0.dll MD5: fdba0db0a1652d86cd471eaa509e56ea
SHA1: 3197cb45787d47bac80223e3e98851e48a122efa
SHA256: 2257fea1e71f7058439b3727ed68ef048bd91dcacd64762eb5c64a9d49df0b57
SSDeep: 384:61G1WPhWksnhi00GftpBjEVXremWRlP55Jk:kGiYnhoiqVXreDT5Y
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-string-l1-1-0.dll MD5: 12cc7d8017023ef04ebdd28ef9558305
SHA1: f859a66009d1caae88bf36b569b63e1fbdae9493
SHA256: 7670fdede524a485c13b11a7c878015e9b0d441b7d8eb15ca675ad6b9c9a7311
SSDeep: 384:xyMvRWPhWFs0i00GftpBjwCJdemnflUG+zI4:xyMvWWoibeTnn
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-synch-l1-1-0.dll MD5: 71af7ed2a72267aaad8564524903cff6
SHA1: 8a8437123de5a22ab843adc24a01ac06f48db0d3
SHA256: 5dd4ccd63e6ed07ca3987ab5634ca4207d69c47c2544dfefc41935617652820f
SSDeep: 384:5Xdv3V0dfpkXc0vVaHWPhWXEi00GftpBj9em+4lndanJ7o:5Xdv3VqpkXc0vVa8poivex
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-synch-l1-2-0.dll MD5: 0d1aa99ed8069ba73cfd74b0fddc7b3a
SHA1: ba1f5384072df8af5743f81fd02c98773b5ed147
SHA256: 30d99ce1d732f6c9cf82671e1d9088aa94e720382066b79175e2d16778a3dad1
SSDeep: 384:JtZ3gWPhWFA0i00GftpBj4Z8wemFfYlP55t:j+oiVweb53
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-sysinfo-l1-1-0.dll MD5: 19a40af040bd7add901aa967600259d9
SHA1: 05b6322979b0b67526ae5cd6e820596cbe7393e4
SHA256: 4b704b36e1672ae02e697efd1bf46f11b42d776550ba34a90cd189f6c5c61f92
SSDeep: 384:2q25WPhWWsnhi00GftpBj1u6qXxem4l1z6hi:25+SnhoiG6IeA8
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-timezone-l1-1-0.dll MD5: babf80608fd68a09656871ec8597296c
SHA1: 33952578924b0376ca4ae6a10b8d4ed749d10688
SHA256: 24c9aa0b70e557a49dac159c825a013a71a190df5e7a837bfa047a06bba59eca
SSDeep: 384:SWPhWK3di00GftpBjH35Gvem2Al1z6hIu:77NoiOve7eu
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-core-util-l1-1-0.dll MD5: 0f079489abd2b16751ceb7447512a70d
SHA1: 679dd712ed1c46fbd9bc8615598da585d94d5d87
SHA256: f7d450a0f59151bcefb98d20fcae35f76029df57138002db5651d1b6a33adc86
SSDeep: 192:pePWIghWG4U9wluZo123Ouo+Uggs/nGfe4pBjSbKT8wuxWh0txKdmVWQ4CWnFnwQ:pYWPhWFS0i00GftpBj7DudemJlP552
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-crt-conio-l1-1-0.dll MD5: 6ea692f862bdeb446e649e4b2893e36f
SHA1: 84fceae03d28ff1907048acee7eae7e45baaf2bd
SHA256: 9ca21763c528584bdb4efebe914faaf792c9d7360677c87e93bd7ba7bb4367f2
SSDeep: 384:8WPhWz4Ri00GftpBjDb7bemHlndanJ7DW:Fm0oiV7beV
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-crt-convert-l1-1-0.dll MD5: 72e28c902cd947f9a3425b19ac5a64bd
SHA1: 9b97f7a43d43cb0f1b87fc75fef7d9eeea11e6f7
SHA256: 3cc1377d495260c380e8d225e5ee889cbb2ed22e79862d4278cfa898e58e44d1
SSDeep: 384:EuydWPhW7snhi00GftpBjd6t/emJlDbN:3tnhoi6t/eAp
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-crt-environment-l1-1-0.dll MD5: ac290dad7cb4ca2d93516580452eda1c
SHA1: fa949453557d0049d723f9615e4f390010520eda
SHA256: c0d75d1887c32a1b1006b3cffc29df84a0d73c435cdcb404b6964be176a61382
SSDeep: 192:bWIghWGd4edXe123Ouo+Uggs/nGfe4pBjSXXmv5Wh0txKdmVWQ4SWEApkqnajPBZ:bWPhWqXYi00GftpBjBemPl1z6h2
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-crt-filesystem-l1-1-0.dll MD5: aec2268601470050e62cb8066dd41a59
SHA1: 363ed259905442c4e3b89901bfd8a43b96bf25e4
SHA256: 7633774effe7c0add6752ffe90104d633fc8262c87871d096c2fc07c20018ed2
SSDeep: 384:sq6nWm5C1WPhWFK0i00GftpBjB1UemKklUG+zIOd/:x6nWm5CiooiKeZnbd/
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-crt-heap-l1-1-0.dll MD5: 93d3da06bf894f4fa21007bee06b5e7d
SHA1: 1e47230a7ebcfaf643087a1929a385e0d554ad15
SHA256: f5cf623ba14b017af4aec6c15eee446c647ab6d2a5dee9d6975adc69994a113d
SSDeep: 192:+Y3vY17aFBR4WIghWG4U9CedXe123Ouo+Uggs/nGfe4pBjSbGGAPWh0txKdmVWQC:+Y3e9WPhWFsXYi00GftpBjfemnlP55s
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-crt-locale-l1-1-0.dll MD5: a2f2258c32e3ba9abf9e9e38ef7da8c9
SHA1: 116846ca871114b7c54148ab2d968f364da6142f
SHA256: 565a2eec5449eeeed68b430f2e9b92507f979174f9c9a71d0c36d58b96051c33
SSDeep: 192:fiWIghWGZirX+4z123Ouo+Uggs/nGfe4pBjS/RFcpOWh0txKdmVWQ4GWs8ylDikh:aWPhWjO4Ri00GftpBjZOemSXlvNQ0
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-crt-math-l1-1-0.dll MD5: 8b0ba750e7b15300482ce6c961a932f0
SHA1: 71a2f5d76d23e48cef8f258eaad63e586cfc0e19
SHA256: bece7bab83a5d0ec5c35f0841cbbf413e01ac878550fbdb34816ed55185dcfed
SSDeep: 384:7OTEmbM4Oe5grykfIgTmLyWPhW30i00GftpBjAKemXlDbNl:dEMq5grxfInbRoiNeSp
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-crt-multibyte-l1-1-0.dll MD5: 35fc66bd813d0f126883e695664e7b83
SHA1: 2fd63c18cc5dc4defc7ea82f421050e668f68548
SHA256: 66abf3a1147751c95689f5bc6a259e55281ec3d06d3332dd0ba464effa716735
SSDeep: 384:kDy+Kr6aLPmIHJI6/CpG3t2G3t4odXL5WPhWFY0i00GftpBjbnMxem8hzlmTMiLV:kDZKrZPmIHJI64GoiZMxe0V
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-crt-private-l1-1-0.dll MD5: 9910a1bfdc41c5b39f6af37f0a22aacd
SHA1: 47fa76778556f34a5e7910c816c78835109e4050
SHA256: 65ded8d2ce159b2f5569f55b2caf0e2c90f3694bd88c89de790a15a49d8386b9
SSDeep: 1536:VAHEGlVDe5c4bFE2Jy2cvxXWpD9d3334BkZnkPFZo6kt:Vc7De5c4bFE2Jy2cvxXWpD9d3334BkZj
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-crt-process-l1-1-0.dll MD5: 8d02dd4c29bd490e672d271700511371
SHA1: f3035a756e2e963764912c6b432e74615ae07011
SHA256: c03124ba691b187917ba79078c66e12cbf5387a3741203070ba23980aa471e8b
SSDeep: 192:aRQqjd7dWIghWG4U9kuDz7M123Ouo+Uggs/nGfe4pBjSbAURWh0txKdmVWQ4CW+6:aKcWPhWFkDz6i00GftpBjYemZlUG+zIU
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-crt-runtime-l1-1-0.dll MD5: 41a348f9bedc8681fb30fa78e45edb24
SHA1: 66e76c0574a549f293323dd6f863a8a5b54f3f9b
SHA256: c9bbc07a033bab6a828ecc30648b501121586f6f53346b1cd0649d7b648ea60b
SSDeep: 384:7b7hrKwWPhWFlsnhi00GftpBj+6em90lmTMiLzrF7:7bNrKxZnhoig6eQN7
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-crt-stdio-l1-1-0.dll MD5: fefb98394cb9ef4368da798deab00e21
SHA1: 316d86926b558c9f3f6133739c1a8477b9e60740
SHA256: b1e702b840aebe2e9244cd41512d158a43e6e9516cd2015a84eb962fa3ff0df7
SSDeep: 384:GZpFVhjWPhWxEi00GftpBjmjjem3Cl1z6h1r:eCfoi0espbr
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-crt-string-l1-1-0.dll MD5: 404604cd100a1e60dfdaf6ecf5ba14c0
SHA1: 58469835ab4b916927b3cabf54aee4f380ff6748
SHA256: 73cc56f20268bfb329ccd891822e2e70dd70fe21fc7101deb3fa30c34a08450c
SSDeep: 384:5iFMx0C5yguNvZ5VQgx3SbwA7yMVIkFGlnWPhWGTi00GftpBjslem89lgC:56S5yguNvZ5VQgx3SbwA71IkFv5oialj
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-crt-time-l1-1-0.dll MD5: 849f2c3ebf1fcba33d16153692d5810f
SHA1: 1f8eda52d31512ebfdd546be60990b95c8e28bfb
SHA256: 69885fd581641b4a680846f93c2dd21e5dd8e3ba37409783bc5b3160a919cb5d
SSDeep: 384:8ZSWWVgWPhWFe3di00GftpBjnlfemHlUG+zITA+0:XRNoibernAA+0
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/api-ms-win-crt-utility-l1-1-0.dll MD5: b52a0ca52c9c207874639b62b6082242
SHA1: 6fb845d6a82102ff74bd35f42a2844d8c450413b
SHA256: a1d1d6b0cb0a8421d7c0d1297c4c389c95514493cd0a386b49dc517ac1b9a2b0
SSDeep: 192:QqfHQdu3WIghWG4U9lYdsNtL/123Ouo+Uggs/nGfe4pBjSb8Z9Wh0txKdmVWQ4Cg:/fBWPhWF+esnhi00GftpBjLBemHlP55q
ImpHash: - 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/freebl3.dll MD5: 343aa83574577727aabe537dccfdeafc
SHA1: 9ce3b9a182429c0dba9821e2e72d3ab46f5d0a06
SHA256: 393ae7f06fe6cd19ea6d57a93dd0acd839ee39ba386cf1ca774c4c59a3bfebd8
SSDeep: 6144:C+YBCxpjbRIDmvby5xDXlFVJM8PojGGHrIr1qqDL6XP+jW:Cu4Abg7XV72GI/qn6z
ImpHash: 2c54251b196d9e0cc804a7061f60558c 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/mozglue.dll MD5: 9e682f1eb98a9d41468fc3e50f907635
SHA1: 85e0ceca36f657ddf6547aa0744f0855a27527ee
SHA256: 830533bb569594ec2f7c07896b90225006b90a9af108f49d6fb6bebd02428b2d
SSDeep: 3072:8Oqe98Ea4usvd5jm6V0InXx/CHzGYC6NccMmxK3atIYHD2JJJsPyimY4kQkE:Vqe98Evua5Sm0ux/5YC6NccMmtXHD2JR
ImpHash: aeefa1230e6cf7c323562e45433b24dd 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/msvcp140.dll MD5: 109f0f02fd37c84bfc7508d4227d7ed5
SHA1: ef7420141bb15ac334d3964082361a460bfdb975
SHA256: 334e69ac9367f708ce601a6f490ff227d6c20636da5222f148b25831d22e13d4
SSDeep: 12288:Mlp4PwrPTlZ+/wKzY+dM+gjZ+UGhUgiW6QR7t5s03Ooc8dHkC2es9oV:Mlp4PePozGMA03Ooc8dHkC2ecI
ImpHash: 6033404985b7d360f94b5f6fbed98789 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/nss3.dll MD5: 556ea09421a0f74d31c4c0a89a70dc23
SHA1: f739ba9b548ee64b13eb434a3130406d23f836e3
SHA256: f0e6210d4a0d48c7908d8d1c270449c91eb4523e312a61256833bfeaf699abfb
SSDeep: 24576:XDI7I4/FeoJQuQ3IhXtHfjyqgJ0BnPQAib7/12bg2JSna5xfg0867U4MSpu731hn:uQ3YX5jyqgynPkbd24VwMSpu7Fhn
ImpHash: 2f6410b337cbd1ca3a8bf343e95c41ee 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/nssdbm3.dll MD5: 569a7a65658a46f9412bdfa04f86e2b2
SHA1: 44cc0038e891ae73c43b61a71a46c97f98b1030d
SHA256: 541a293c450e609810279f121a5e9dfa4e924d52e8b0c6c543512b5026efe7ec
SSDeep: 1536:5vNGVOt0VjOJkbH8femxfRVMNKBDuOQWL1421GlkxERC+ANcFZoZ/6tNRCwI41ZH:hNGVOiBZbcGmxXMcBqmzoCUZoZebHZMw
ImpHash: d13d5fc7f2f1cf397f0d0cfd732db7a2 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/softokn3.dll MD5: 67827db2380b5848166a411bae9f0632
SHA1: f68f1096c5a3f7b90824aa0f7b9da372228363ff
SHA256: 9a7f11c212d61856dfc494de111911b7a6d9d5e9795b0b70bbbc998896f068ae
SSDeep: 3072:zAf6suip+z7FEk/oJz69sFaXeu9CoT2nIZvetBWqIBoE9Mv:Q6PpsF4CoT2EeY2eMv
ImpHash: 4d153c0cea0b76890c21127ac6dbd559 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/ucrtbase.dll MD5: d6326267ae77655f312d2287903db4d3
SHA1: 1268bef8e2ca6ebc5fb974fdfaff13be5ba7574f
SHA256: 0bb8c77de80acf9c43de59a8fd75e611cc3eb8200c69f11e94389e8af2ceb7a9
SSDeep: 24576:bZBmnrh2YVAPROs7Bt/tX+/APcmcvIZPoy4TbK:FBmF2lIeaAPgb
ImpHash: 1200ab27b3dc27748d0142a31f7a47c7 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\/vcruntime140.dll MD5: 7587bf9cb4147022cd5681b015183046
SHA1: f2106306a8f6f0da5afb7fc765cfa0757ad5a628
SHA256: c40bb03199a2054dabfc7a8e01d6098e91de7193619effbd0f142a7bf031c14d
SSDeep: 1536:AQXQNgAuCDeHFtg3uYQkDqiVsv39niI35kU2yecbVKHHwhbfugbZyk:AQXQNVDeHFtO5d/A39ie6yecbVKHHwJF
ImpHash: fa315c9bc46ab41d4bc4e3f94023067f 		Access, Create, Delete, Write Dropped File
Whitelisted
C:\Program Files\Qemu-ga\qemu-ga.exe - Access
Not Available
C:\Program Files\qga\qga.exe - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\360Browser\Browser\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\360Browser\Browser\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\360Browser\Browser\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\7Star\7Star\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\7Star\7Star\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\7Star\7Star\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Amigo\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Amigo\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Amigo\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Bromium\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Bromium\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Bromium\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\CentBrowser\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\CentBrowser\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Chedot\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Chedot\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Chedot\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Chromium\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Chromium\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Chromium\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\CocCoc\Browser\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\CocCoc\Browser\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Comodo\Dragon\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Comodo\Dragon\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Comodo\Dragon\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Elements Browser\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Elements Browser\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Elements Browser\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Epic Privacy Browser\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Epic Privacy Browser\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Epic Privacy Browser\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Go!\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Go!\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Go!\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome SxS\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome SxS\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome SxS\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\..\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\..\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\..\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\.\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\.\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\.\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\CertificateTransparency\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\CertificateTransparency\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\CertificateTransparency\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\CrashpadMetrics-active.pma\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\CrashpadMetrics-active.pma\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\CrashpadMetrics-active.pma\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\Crashpad\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\Crashpad\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\Crashpad\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\Default\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\Default\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\EVWhitelist\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\EVWhitelist\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\EVWhitelist\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\FileTypePolicies\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\FileTypePolicies\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\FileTypePolicies\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\First Run\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\First Run\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\First Run\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\Local State\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\Local State\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\Local State\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\OriginTrials\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\OriginTrials\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\OriginTrials\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\PepperFlash\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\PepperFlash\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\PepperFlash\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\SSLErrorAssistant\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\SSLErrorAssistant\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\SSLErrorAssistant\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\SwReporter\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\SwReporter\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\SwReporter\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\WidevineCdm\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\WidevineCdm\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\WidevineCdm\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\pnacl\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\pnacl\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Google\Chrome\User Data\\pnacl\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Kometa\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Kometa\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Kometa\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Microsoft\Windows\INetCache\\ - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Nichrome\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Nichrome\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Nichrome\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Orbitum\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Orbitum\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Orbitum\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\\ - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\\ - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\INetCookies\\ - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cookies\\ - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\QIP Surf\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\QIP Surf\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\QIP Surf\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Rafotech\Mustang\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Rafotech\Mustang\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Rafotech\Mustang\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\RockMelt\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\RockMelt\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\RockMelt\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Safer Technologies\Secure Browser\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Safer Technologies\Secure Browser\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Safer Technologies\Secure Browser\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Sputnik\Sputnik\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Sputnik\Sputnik\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Sputnik\Sputnik\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Suhba\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Suhba\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Suhba\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Superbird\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Superbird\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Superbird\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Temp\182004765502204915563913.tmp-journal - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Temp\182004765502204915563913.tmp-wal - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Temp\182028482867542631482656.tmp-journal - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Temp\182028482867542631482656.tmp-wal - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Temp\182029721896254689506701.tmp-journal - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Temp\182031289079242754423543.tmp-journal - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Temp\182031289079242754423543.tmp-wal - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Temp\182031918183732679381489.tmp-journal - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Temp\182031918183732679381489.tmp-wal - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Temp\182032848139586271779370.tmp-journal - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Temp\182032848139586271779370.tmp-wal - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Temp\182033787308292230589271.tmp-journal - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Temp\182033787308292230589271.tmp-wal - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Temp\2035036576518928862638.tmp-journal - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Temp\41E341C3\ - Access, Create, Delete
Not Available
C:\Users\aETAdzjz\AppData\Local\Temp\curbuf.dat - Access, Delete
Not Available
C:\Users\aETAdzjz\AppData\Local\TorBro\Profile\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\TorBro\Profile\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\TorBro\Profile\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Torch\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Torch\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Torch\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Vivaldi\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Vivaldi\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Vivaldi\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Xpom\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Xpom\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Xpom\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Yandex\YandexBrowser\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Yandex\YandexBrowser\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\Yandex\YandexBrowser\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\uCozMedia\Uran\User Data\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\uCozMedia\Uran\User Data\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Local\uCozMedia\Uran\User Data\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\.purple\accounts.xml - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\\\cookies.sqlite - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\\\formhistory.sqlite - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\\logins.json - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Comodo\IceDragon\Profiles\\\cookies.sqlite - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Comodo\IceDragon\Profiles\\\formhistory.sqlite - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Comodo\IceDragon\Profiles\\logins.json - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@ad.360yield[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@ad13.adfarm1.adition[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@addthis[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@adfarm1.adition[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@adform[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@adformdsp[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@adnxs[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@adscale[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@adserving.ancoraplatform[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@adsrvr[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@adtech[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@advertising[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@angsrvr[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@api.bing[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@at.atwola[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@bidswitch[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@bing[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@bluekai[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@bs.serving-sys[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@bs.serving-sys[3].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@c.bing[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@c.msn[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@c1.microsoft[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@casalemedia[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@connextra[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@crwdcntrl[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@demdex[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@doubleclick[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@dpm.demdex[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@exelator[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@eyeota[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@google[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@ibeu2.mookie1[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@ih.adscale[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@linkedin[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@m.exactag[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@mathtag[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@microsoft[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@msn[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@openx[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@pixel.rubiconproject[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@pubmatic[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@rubiconproject[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@scorecardresearch[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@semasio[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@server.adformdsp[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@serving-sys[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@serving.experianmarketingservices[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@smartadserver[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@tapad[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@track.adform[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@turn[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@w55c[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@www.bing[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@www.linkedin[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\Low\\aetadzjz@www.msn[2].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\\aetadzjz@g.live[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Windows\Cookies\\aetadzjz@google[1].txt - Access, Read
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Moonchild Productions\Pale Moon\Profiles\\\cookies.sqlite - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Moonchild Productions\Pale Moon\Profiles\\\formhistory.sqlite - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Moonchild Productions\Pale Moon\Profiles\\logins.json - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\..\logins.json - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\.\logins.json - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\logins.json - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\\..\cookies.sqlite - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\\..\formhistory.sqlite - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\\.\cookies.sqlite - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\\.\formhistory.sqlite - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\\3y2joh8o.default\cookies.sqlite - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\\3y2joh8o.default\formhistory.sqlite - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Opera Software\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Opera Software\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Opera Software\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Thunderbird\Profiles\\logins.json - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Waterfox\Profiles\\\cookies.sqlite - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Waterfox\Profiles\\\formhistory.sqlite - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\Waterfox\Profiles\\logins.json - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\..\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\..\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\..\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\..\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\..\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\..\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\.\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\.\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\.\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\.\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\.\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\.\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Adobe\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Adobe\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Adobe\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Adobe\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Adobe\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\FeDQmW2i.flv\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\FeDQmW2i.flv\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\FeDQmW2i.flv\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\FeDQmW2i.flv\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\FeDQmW2i.flv\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\FeDQmW2i.flv\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\GU1xEN.png\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\GU1xEN.png\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\GU1xEN.png\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\GU1xEN.png\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\GU1xEN.png\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\GU1xEN.png\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Identities\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Identities\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Identities\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Identities\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Identities\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Identities\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\LJc6a5Q_MmBs.swf\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\LJc6a5Q_MmBs.swf\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\LJc6a5Q_MmBs.swf\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\LJc6a5Q_MmBs.swf\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\LJc6a5Q_MmBs.swf\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\LJc6a5Q_MmBs.swf\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\LYycmo-cjNTfWau.pdf\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\LYycmo-cjNTfWau.pdf\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\LYycmo-cjNTfWau.pdf\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\LYycmo-cjNTfWau.pdf\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\LYycmo-cjNTfWau.pdf\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\LYycmo-cjNTfWau.pdf\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Macromedia\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Macromedia\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Macromedia\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Macromedia\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Macromedia\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Macromedia\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Mg5zkU.png\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Mg5zkU.png\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Mg5zkU.png\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Mg5zkU.png\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Mg5zkU.png\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\Mg5zkU.png\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\bMn7rPCuez.xls\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\bMn7rPCuez.xls\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\bMn7rPCuez.xls\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\bMn7rPCuez.xls\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\bMn7rPCuez.xls\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\bMn7rPCuez.xls\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\eDL9vRODWdK0.avi\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\eDL9vRODWdK0.avi\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\eDL9vRODWdK0.avi\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\eDL9vRODWdK0.avi\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\eDL9vRODWdK0.avi\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\eDL9vRODWdK0.avi\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\fghvhghvgfdgfhchfg.exe\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\fghvhghvgfdgfhchfg.exe\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\fghvhghvgfdgfhchfg.exe\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\fghvhghvgfdgfhchfg.exe\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\fghvhghvgfdgfhchfg.exe\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\fghvhghvgfdgfhchfg.exe\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\foOZ1HtoS4PjQ8Udex.avi\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\foOZ1HtoS4PjQ8Udex.avi\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\foOZ1HtoS4PjQ8Udex.avi\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\foOZ1HtoS4PjQ8Udex.avi\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\foOZ1HtoS4PjQ8Udex.avi\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\foOZ1HtoS4PjQ8Udex.avi\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\h7DVpNm6QA.png\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\h7DVpNm6QA.png\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\h7DVpNm6QA.png\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\h7DVpNm6QA.png\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\h7DVpNm6QA.png\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\h7DVpNm6QA.png\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\hhMbey-61drTCHdugi.m4a\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\hhMbey-61drTCHdugi.m4a\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\hhMbey-61drTCHdugi.m4a\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\hhMbey-61drTCHdugi.m4a\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\hhMbey-61drTCHdugi.m4a\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\hhMbey-61drTCHdugi.m4a\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\iY Y.mp3\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\iY Y.mp3\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\iY Y.mp3\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\iY Y.mp3\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\iY Y.mp3\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\iY Y.mp3\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\kSQ8d9iRcfRWCQRh.gif\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\kSQ8d9iRcfRWCQRh.gif\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\kSQ8d9iRcfRWCQRh.gif\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\kSQ8d9iRcfRWCQRh.gif\wallets\.wallet - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\kSQ8d9iRcfRWCQRh.gif\wallets\electrum.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\\kSQ8d9iRcfRWCQRh.gif\wallets\wallet.dat - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\brave\\\Cookies - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\brave\\\Login Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\brave\\\Web Data - Access
Not Available
C:\Users\aETAdzjz\AppData\Roaming\filezilla\recentservers.xml - Access
Not Available
C:\Users\aETAdzjz\Desktop\P0Hc9z_vVr1Uxdn12a - Access
Not Available
C:\Users\aETAdzjz\Desktop\P0Hc9z_vVr1Uxdn12a\0K3ML.docx - Access, Read
Not Available
C:\Users\aETAdzjz\Desktop\~$I .doc.rtf - Access, Read
Not Available
C:\Users\aETAdzjz\Documents\My Shapes - Access
Not Available
C:\Users\aETAdzjz\Documents\My Shapes\_private - Access
Not Available
C:\Users\aETAdzjz\Documents\Nu56E.docx - Access, Read
Not Available
C:\Users\aETAdzjz\Documents\OneNote Notebooks - Access
Not Available
C:\Users\aETAdzjz\Documents\Outlook Files - Access
Not Available
C:\Users\aETAdzjz\Documents\_Lw_Ioi_qC44f0vdNG - Access
Not Available
C:\Users\aETAdzjz\Documents\_Lw_Ioi_qC44f0vdNG\jNZkgQds.doc - Access, Read
Not Available
C:\Users\aETAdzjz\Documents\fqs7LNS.xlsx - Access, Read
Not Available
C:\Users\aETAdzjz\Documents\imR3uKJ.xlsx - Access, Read
Not Available
C:\Users\aETAdzjz\Documents\tXrvgvZhuK.docx - Access, Read
Not Available
C:\Users\aETAdzjz\Documents\z8Q_yDu1jaODNbm6Rg - Access
Not Available
C:\Users\aETAdzjz\Documents\z8Q_yDu1jaODNbm6Rg\-B8VZiXAJgeyuxM1J9Dr.docx - Access, Read
Not Available
C:\Users\aETAdzjz\Documents\z8Q_yDu1jaODNbm6Rg\uhxF0nw - Access
Not Available
C:\Users\aETAdzjz\Documents\z8Q_yDu1jaODNbm6Rg\uhxF0nw\3wiKno2U6 - Access
Not Available
C:\Users\aETAdzjz\Documents\z8Q_yDu1jaODNbm6Rg\uhxF0nw\8O4HGEn56P - Access
Not Available
C:\Windows\SysWOW64\cmd.exe - Access
Not Available
C:\Windows\SysWOW64\timeout.exe - Access
Not Available
C:\Windows\system32\MSVBVM60.DLL - Access
Not Available
\??\C:\Windows\syswow64\msvbvm60.dll - Access
Not Available
Registry (220)
»
Registry Key Name Operations
HKEY_CURRENT_USER Access
HKEY_CURRENT_USER\Software\BitCore\BitCore-Qt Access
HKEY_CURRENT_USER\Software\BitCore\BitCore-Qt\strDataDir Access, Read
HKEY_CURRENT_USER\Software\BitcoinABC\BitcoinABC-Qt Access
HKEY_CURRENT_USER\Software\BitcoinABC\BitcoinABC-Qt\strDataDir Access, Read
HKEY_CURRENT_USER\Software\BitcoinGold\BitcoinGold-Qt Access
HKEY_CURRENT_USER\Software\BitcoinGold\BitcoinGold-Qt\strDataDir Access, Read
HKEY_CURRENT_USER\Software\Bitcoin\Bitcoin-Qt Access
HKEY_CURRENT_USER\Software\Bitcoin\Bitcoin-Qt\strDataDir Access, Read
HKEY_CURRENT_USER\Software\Litecoin\Litecoin-Qt Access
HKEY_CURRENT_USER\Software\Litecoin\Litecoin-Qt\strDataDir Access, Read
HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Sessions\ Access
HKEY_CURRENT_USER\Software\Microsoft\Command Processor Access
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2 Access
HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\0a0d020000000000c000000000000046 Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\13dbb0c8aa05101a9bb000aa002fc45a Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\189cba75c69c634996739bac92103ebb Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\1a8bd43e654f65418fbafadeef063a57 Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\1cfb96c6c96b454ebff73da2e9f63f51 Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\3517490d76624c419a828607e2a54604 Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\467888fc50a6c6448d6cc0cf7b5307d6 Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\48dea081c9634a43a6861907855add5c Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\55aad8d134512d438564aa678cb92d66 Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\71b0295bef58e344911262b243f005ac Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\8503020000000000c000000000000046 Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9207f3e0a3b11019908b08002b2a56c2 Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676 Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001 Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\Email Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002 Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\Email Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Server Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Password Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Port Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Server Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 User Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Password Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Port Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Server Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP User Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003 Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\Email Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\f86ed2903a4a11cfb57e524153480001 Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook Access
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall Access
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\OneDriveSetup.exe Access
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\OneDriveSetup.exe\DisplayName Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\OneDriveSetup.exe\DisplayVersion Access, Read
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System Access
HKEY_CURRENT_USER\Software\monero-project\monero-core Access
HKEY_CURRENT_USER\Software\monero-project\monero-core\wallet_path Access, Read
HKEY_LOCAL_MACHINE Access
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Access
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\MachineGuid Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VBA\Monitors Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\AutoRun Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\CompletionChar Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\DefaultColor Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\DelayedExpansion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\DisableUNCCheck Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\EnableExtensions Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\PathCompletionChar Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Version Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Plugin Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Plugin\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Plugin\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\IE40 Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\IE40\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\IE40\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\IEData Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\IEData\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\IEData\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox 25.0 (x86 en-US) Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox 25.0 (x86 en-US)\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox 25.0 (x86 en-US)\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MozillaMaintenanceService Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MozillaMaintenanceService\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MozillaMaintenanceService\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\WIC Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\WIC\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\WIC\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757 Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173 Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860 Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655 Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743 Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063 Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573 Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F03217071FF} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F03217071FF}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F03217071FF}\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3c3aafc8-d898-43ec-998f-965ffdae065a} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3c3aafc8-d898-43ec-998f-965ffdae065a}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3c3aafc8-d898-43ec-998f-965ffdae065a}\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10}\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{582EA838-9199-3518-A05C-DB09462F68EC} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{582EA838-9199-3518-A05C-DB09462F68EC}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{582EA838-9199-3518-A05C-DB09462F68EC}\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{68306422-7C57-373F-8860-D26CE4BA2A15} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{68306422-7C57-373F-8860-D26CE4BA2A15}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{68306422-7C57-373F-8860-D26CE4BA2A15}\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9BE518E6-ECC6-35A9-88E4-87755C07200F} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9BE518E6-ECC6-35A9-88E4-87755C07200F}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9BE518E6-ECC6-35A9-88E4-87755C07200F}\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-7AD7-FFFF-7B44-AA0000000001} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B175520C-86A2-35A7-8619-86DC379688B9} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B175520C-86A2-35A7-8619-86DC379688B9}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B175520C-86A2-35A7-8619-86DC379688B9}\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757 Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173 Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860 Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655 Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743 Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063 Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573 Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{e52a6842-b0ac-476e-b48f-378a97a67346} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{e52a6842-b0ac-476e-b48f-378a97a67346}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{e52a6842-b0ac-476e-b48f-378a97a67346}\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{e6e75766-da0f-4ba2-9788-6ea593ce702d} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\DisplayVersion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{f325f05b-f963-4640-a43b-c8a494cdda0f} Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{f325f05b-f963-4640-a43b-c8a494cdda0f}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{f325f05b-f963-4640-a43b-c8a494cdda0f}\DisplayVersion Access, Read
Mutex (2)
»
Mutex Name Operations
Access
UA9D9D109-343A2EC6-89B2AFB8-7F3B18F0-E80C0038 Access
Domain (3)
»
Domain Sources Severity
kalpvedafoundation.com PCAP, Function Log
Unknown
onedrive.live.com Function Log
Unknown
tarot-sunce.com PCAP, Function Log
Unknown
URL (4)
»
URL Operations Category Severity
http://kalpvedafoundation.com/amour/linkder.exe GET Contacted
Unknown
http://kalpvedafoundation.com/amour/linkder.exe GET Contacted
Unknown
http://onedrive.live.com/download?cid=4C3F5C65A99DA195&resid=4C3F5C65A99DA195%21241&authkey=AGyBKeKMs6qKShY GET Contacted
Unknown
tarot-sunce.com/linko/PL341/index.php POST Contacted
Unknown
IP (3)
»
IP Protocols Sources
13.107.42.13 HTTP, TCP PCAP, Function Log
178.218.167.4 DNS, HTTP, TCP PCAP, Function Log
192.185.76.89 DNS, HTTP, TCP PCAP, Function Log
Export to TXT Export to JSON
VMRay - Analyzer - www.vmray.com
Legal Note - Privacy Policy
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image