82d87cef...377a | IOCs
Logo
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification:
Backdoor
Ransomware
Threat Names:
Ryuk
Gen:Variant.Ulise.96475
Mal/Generic-S

vV.exe

Windows Exe (x86-64)

Created at 2020-02-18T00:49:00

...

Remarks (1/1)

(0x0200000E): The overall sleep time of all monitored processes was truncated from "37 minutes, 47 seconds" to "10 minutes, 20 seconds" to reveal dormant functionality.

Indicators

File (6470)
»
Filename Hash Operations Category Severity
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Acrobat\10.0\AdobeCMapFnt10.lst.RYK MD5: da3cee3774c435c61fb755aa67805bf6
SHA1: 5354c3e8d61452fe4f80bdcdab64dbdbc56817a4
SHA256: 6f73228749fe6cc4b2b1c0011a284c2f37b277c257b5cecbf8834cf9da500758
SSDeep: 768:pbkgOs4CR3h3rh8gP2iWezkyZsEej4SfaU8urWoUe+cQMqe4SoMS:yxCRZrVWehifapurnUe+cQMv45MS
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Acrobat\10.0\AdobeSysFnt10.lst.RYK MD5: 83a09cca9a5398b9862029ac2b309743
SHA1: e92d74a2ee6bd59b6df35f83f353639d6c8341fa
SHA256: 69a9f9617cb090f34ef1efa4e26e7714ee4f03e337489826321322e07248c705
SSDeep: 1536:D0zC1AroB1SANpa6UvjRgI0P21OUc4uGBksAF+BgbuoGmTxKRpy30mc3Ayjxa+Nz:D4zoxp7Uvj7GwoGmo/13NCw6X2Fko
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Acrobat\10.0\Cache\AcroFnt10.lst.RYK MD5: 8e393df4e6f1768dc5ab8aac7583a9d1
SHA1: 92208a0b68716a8738a6ffe22f797b918f102ee1
SHA256: 448343d9c47e012055393a5c12a2731d54af2ec6e8fafc7275de396efc4c1123
SSDeep: 1536:dSEBwVZXPkjyfO5QiMQWsS/6/LuqVCyLXiyYOd6zN:gE6O5QEnSC/3GyZgp
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Acrobat\10.0\UserCache.bin.RYK MD5: c0fc7fe4836d0f1325b03a806ae3712b
SHA1: 1ef009cc2f1ebef9f8f22a5c8adf39338dc536f4
SHA256: ef808823ec25cc5f8e8174dfacfa4678ffa9a909a315e990b5af8412c5fb3b64
SSDeep: 1536:i1svCGoPg5nt6FrGXRaWQpy+MSN9IdePaWbBKTpZxQcuoyiH4:ja9Pg5tXR7ROedeCsB+vJ4
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Color\ACECache11.lst.RYK MD5: 3dc31a0a3d8ec516899eee7d7db4a166
SHA1: 5ef54d1f1bb0a87572a19b7107b7ea1bd3393a84
SHA256: 2f1bfe35a063374607baf9d10e74d13f3fae187606030ec9dbe66fd138352a8c
SSDeep: 24:JFC7u9Sd1ucWMczicT8zxOTJ0oTyYqUQrQKS5d/L1NfhpsMi8nWpAovT+L:/C7kSdEcWMczicYVO64XirQxzzZpM8WY
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Color\Profiles\wsRGB.icc.RYK MD5: 2398f8abeb28e7265798748d306c08d8
SHA1: 69e9c2dc477d79f14e5f4eee3fe5d14db4f716b4
SHA256: c3f60af8ef4c7f64aedc931530143bbda8b952e727f8dda2e9c26124afbbe7ba
SSDeep: 48:cMuQDNpCkhvLCeKUJcz/eAELdruDS+lVrJV4f1Bb0+oq8zSyFZgtWbg6t4X7axN:h7BpCkhDnJU/3EZCDS2rJ+f1xlOSYe6z
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Color\Profiles\wscRGB.icc.RYK MD5: 3e27a9feb810676d6635d89e6f78100e
SHA1: 0f06438ecb3b303b556013d9afb5810252dfd1d0
SHA256: c8182c7fdd0580d41dc745f67748d59e966b0a3be334c39bc3773b203d86b0e4
SSDeep: 1536:G8KdaDy8+zBr6nJvSkjXcMsCfORzMGUvEdZRR0EC:Go+8sBr6nJvdVNIMp87RRC
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Adobe\Acrobat\10.0\SharedDataEvents.RYK MD5: 53fa9ab0c659925797380866c94cc84e
SHA1: 1c33af347c0182b818f47882f631c0a918177063
SHA256: ee2f2abb55309242d651e4e04148c440ad93f0d8138f590ae82d5207bf22dcdf
SSDeep: 96:SVaikbMQy64DrboMCfbLh0L/5Y+lpYUI2N7hYeeXqPs6gSEXu6:ka3MQy6UboMCfbLh0D5Y+lppvhhgXqPK
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\GDIPFONTCACHEV1.DAT.RYK MD5: 447e02843c76b3dc24a1c7c354f795f7
SHA1: e57193854241778913b997237468f7790432b26f
SHA256: 27c6348384ffb3f7ec922a67db8f9ef403f5963da8bd24be86f794e34323c403
SSDeep: 1536:DPjhu+54s/KhlR/hLM57uWl2azi5D1umWxgtIU5Hwl371PXkc/zYv1Ql8X3yVF59:DwIKhlKuWsK6D1VWxC5eOME5M70mf0/8
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\IconCache.db.RYK MD5: d1038680025fea3d58b8fa70ff7a0530
SHA1: bfd98e95d86c68b669ca2610985a56070909f95a
SHA256: 38830c40f697ccddf38921c941f9cb94af3211c01f6984b0fc788d9063b5a4a8
SSDeep: 24576:pLnfIqfzkCrzYiF8gpvgfuGE8xBo4eOaLOtZ+gw5aYgzIk:RPbkCIWvsu/bJIZ+P5aY+
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\4vFdHCcYxKg9t.swf.RYK MD5: ebf63d8dfeb7e493d82adc41a5aeea43
SHA1: 4f1e6929f7627cd3bf4381f6faab3b83fd6b0473
SHA256: 2233607bb6e6e059695f6da22b10ed24ce631df34ad91dc073e9a018fe9c2829
SSDeep: 192:pLYMiLdJXtGCjD5+uSHOWhWQOjQ8lf+WNvaxAiTTP6Ns8BRQtgg1dMa62mAXIu:p0MRCs71hHClBNylFruYdVStu
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\9xTcx7.m4a.RYK MD5: 6a0d06b8dd2131d2813e82cd4542a6eb
SHA1: d956acae8787434837c2d61841d2561e887dcd47
SHA256: 3383692885ff1ed3c167703d1b9867327aca534b7ada69d80112de497954fc0e
SSDeep: 1536:AfTCN8+jjFTYYWQr83/YlxbFEhrFrr8CD/eHNgpwllOUCML:AfeFTyMxZEee/s2pw2gL
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\AdobeARM.log.RYK MD5: 5805a6ff946af60e8ec9d5e6079ebd8c
SHA1: aa72198cea1ae9f5c6b43ebc6b181fa56ac2b57d
SHA256: 9436f929a28dcb3b3a178c5a11b32bb223a0559742f32679d6372c70bd23a2e3
SSDeep: 24:a59n6uk/oZEVfTuymqzVUwz+GWHKfF9GLKPgT:wk/oEXmqzywhHt9Ax
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\C02rO_EXKCJ.flv.RYK MD5: 1c3b306bca8265307eee41784e0fab2d
SHA1: 9487f11b59dfd28b1f142626319b28d80c1bd5ac
SHA256: 2fdbc6c82f9a520807214cc2971a3944b38a2410c9f3e2f0ec8519c041d332c3
SSDeep: 1536:uBec6JTALFcTl3JEZJUacqo+98PF+wMDCaau0qh00rL3pn1FWNrnLz6alfnGzh8R:5cyTABc7EZiaborI7DtKly0JVlfG6R
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\C0yl.swf.RYK MD5: 8043e1e61bfc922395c6d1aeb0488fde
SHA1: a6e9e9c73663d96b4e2f6c69de476842a07a1818
SHA256: 4d43a93035503266549fd78d6468cd5acb988ed256c0dec673f94c61b0260c04
SSDeep: 1536:FnTRPSN5lHVd5m0C5sQO8hIz05d42RwQt6Ag7iP9dNHMwzhx6a6:FnTRPujnSGp8y05d4uwQMPiFr3y
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Cookies\index.dat.RYK MD5: 8242c47c2580c947ec930699b7995c37
SHA1: 8d01c40ab579af756d983aa235edf15de60e4896
SHA256: 100894847edb9abc8edb23592ef0113e3903c56f2c7f7362490ebaccdc385e6f
SSDeep: 384:Pwszhz4cqOJDUHgadroggcuZW/PiJPd7cuWh9nu/DyoMd:P54cLlyroO/PyFnWh9nyMd
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\F5GmmRy.ods.RYK MD5: 47dbd7821e06aeb63865a26699752431
SHA1: a8f3aa1f3ee55d3e5b3905aaa13252f8442b98d0
SHA256: 75ea2efdc5a3bee1dfe7f3fea794338a40a16425529ceb464fc33b40a0f1239d
SSDeep: 384:SrgEWFydcDxzkPkVsWSv7gyQ5gHzqFoqajCk+UU1YbB:Wg1mcDxoiQ7gyQ5gmFoqWCk+UUQB
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\LIyP-VvAkJYVi0.wav.RYK MD5: 7dc23c732e9e1163854bbae762da0260
SHA1: 1fe0ef779cb689d33c8c5882faa671c4874fc263
SHA256: 57d82b40a7f613f4df23384b2cf700b8ecb13089e6e1da0c870b99d93cfe12c9
SSDeep: 1536:DsrVwcbY8oJMCHkPDoc5Gd0a3yQjh4ksWWxu2VwVUZre0WoXjP4jf8B3n0:D0WQAfEPxOjh14u2VUUQ0WoTPIf8B3n0
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Mg61.avi.RYK MD5: c668c0a20d73a1064a9279c5fe1b6436
SHA1: 2bacd0dc0b58a375bc30b144697fcdec5293a5b5
SHA256: 4c207535004d02875df800db0be2d1ad98d938914ac9150d8895d4661088ca75
SSDeep: 1536:mHQz2vhqugNmED3MPRHjPCcMb2bvRwcVp3iK8oxEU7IZ7uyQUmWY6NNSL6AeVDLd:mHthqzTMpHziQRwcV5P8I9WY6e9K1
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Nc0ol7M.m4a.RYK MD5: e1b5db119811025e31fef2a1656e206f
SHA1: ec198072019f54edc6918b6fbaf379592c7b19e0
SHA256: 87b7dc41dd0ac731da39f2475f1e1973f22253756ee4ebeccae2c7ab2ebc909a
SSDeep: 1536:fbAfFmWFUj0J6pK+igr4pi1RoSt/svuBwegdHtm+hT2Jepl/SNh3PRgZ/3ksGYq8:f84WiM6pnigrlEK/Wuuegdt2JgaNZPRE
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Ny0GbNFJr_.mp4.RYK MD5: 90744b97e83b3715a37ebdddefcae9f1
SHA1: e97d5c3c1fa6ed87ee889298c648bad76bf842b5
SHA256: aa64e26e489e1d7026f887ab9c52410f503f354d909352b8f68a9194bf909c28
SSDeep: 768:J3TSOTKiO4qIOHX0gmtX2qVx7PLlxXEpKuVkDFQilwjP0TwPz0+9a4ql/:xTNTbiVHkdXHDLBxXuKJhlwT0MUL
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\T5jnPlZD.wav.RYK MD5: 491f94f6cf3e8954f890b69c4df210a8
SHA1: fbbda842cec7af24724ea387aea2369776c0c9be
SHA256: 79c46742f494dd402b5c3a429cafe013635dc674aef82bda9d1eb85507222d23
SSDeep: 1536:KKikM9G5sQBKrdAIm9o/A/DUC7xroOxYHfxHHeuso2:KH900roP/IA0P/xHqo2
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\ZbD9ldUd8UppQli.ppt.RYK MD5: 88f56a70068fbb994cb432553cba1d96
SHA1: 218cf8594dd598602d2bc8f51fafcb6c63156adf
SHA256: 19690d43439e67d7bd42af95fdeaa33fae0849d2ddb7d6dc010de2eab07701df
SSDeep: 48:yueR7nQLl+nkP8y5WezBRDFfPMZhFZmfQHJ54BUzxqLnINOkMM35S9UTsOHQKm/l:y/2Lz757lply5AQHJHNcFm35SaC52w
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\bbzDvO6Ui4.wav.RYK MD5: 7d2ba97599f6b7e63e5e75ad644f81b5
SHA1: 8b7a5073cead14e87f7422c732fb72af3ecfaf80
SHA256: 2ef12b3d1c13d3da0db231905647b61d1b895afe094181b139fb6d1abfa03694
SSDeep: 1536:rgVmEih14WL8fmtDx3NOkPAdgV3DcBJTrCT6wzkOVAQ3kO9XidgwUk1CpjqR:ru3ih3QmNxNsg5IXT+T6wzkOVAcbdsCu
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\fl9MSZQauGMSGwD.mp4.RYK MD5: 0ff6748b8f386c14e1b4759bb4212d21
SHA1: 33a7690547771ecd88c3bf418fcdcf50ded269f5
SHA256: de34cc91d3459811144dd664d8b9ce9e0ba1e1ae8e1202d81704194655eebf3d
SSDeep: 384:DF+p0UUu8qxe/37CtkJoZuF8wmtkpWg4Od:5+2U1Xe/37CSEttdgL
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\gI4Q.jpg.RYK MD5: 640761be33d5bce8f6e9503f10280698
SHA1: 4b70a8501c37036e5144ac34d5002468a2551665
SHA256: dd9e0fd857f263fd1562c8b59a91cb06b29730f59c1e97cb1655f74fccd59966
SSDeep: 768:XpPVBI6WpYQJSIIwM5LQizQQCAr8NfA6Te5AXPZKN64G75yx:Xxr5WpiwMZXUQCFkqXBw6f8x
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\n9ZbWQ05MT.mp4.RYK MD5: d1b7b4bc1175f1d964f6cf08979f4b7d
SHA1: 86f2dc5879fd7cfbea6cd18cc00f120021ff0434
SHA256: fc938ef4c98c11f60c2f229a75c1f7a17b8771339684d68254f3a1ff26c04d70
SSDeep: 384:Df10uIDqzQ52aZRNIlJXteATg4M1z/ZyGZ9J/cfI4bPXnIfJ8oOr1gOW0tZ:j5yqE7ZRnATgNZyG75obPXnIfJ1OrcEZ
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\nVi9nD.mp4.RYK MD5: 048391911d8abdc36bcc833fc71485e7
SHA1: 45a5290b5461701afb1b4e42c010a4fab5a18da0
SHA256: 2437e586d96f27622ed95a56c1b2e54be60eb52ddd95035d49fa540972c6b5eb
SSDeep: 768:nqWREDAnCp375GhbfuUCyMDQrZzBqtRTdfRjkVvkHP0lG2trsKzF0gk/5BN:qWaAC4hb1McrZzBglkkH8lGMrsK+gCXN
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\wK2Uy-8.xls.RYK MD5: 5e561891794209cc6f7ffcd57869df04
SHA1: 86fbebdc44bddf7d854dcca6bf27938a6ed44e9f
SHA256: 4e185c304cea112b568346489cf67e5c57522e101570201575344d5189d337bf
SSDeep: 192:uT1UqvIHSGyNsbCWuxLCcnmhKSV4Vb0urBKymTf20UNM:GTvIHFytSKb/rxe5d
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\y4699rII-.doc.RYK MD5: d0f9005196bbe04e3b2c4e3faffcd5fe
SHA1: 7aa6c54323041957128389f4cfed5fc44971492c
SHA256: 407fa7f382a7e0c04212e2953a00286b95b0542180c87da076db47ff8b280355
SSDeep: 1536:Bk6IQA4HzR8vcco4zxEWNGIO39a4lWQ0Y1DLX30K3m0zQdAd4wZmiJvaPpzrkl59:BhDAoWg4xEoC9jc3Y1DLX3H2hdAd4Gpl
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History\Low\History.IE5\index.dat.RYK MD5: cbe02f1da6c0ebcf1d02fd6ecf88bf56
SHA1: 3bff46fcdcf411cb3ee0fdfe8957dee6de705d9a
SHA256: adca6757070e857cb789c0294aed97dec1afe5a0ad84e98ba1e30552df5f1817
SSDeep: 768:hJx6Zja/hs842SEf5sA73HjhWn1qt4WObBPuJ:J6Zja5l42fz73FWnDWYuJ
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\FORMS\FRMCACHE.DAT.RYK MD5: 7f6f966d4828b76118cdb729494f43d1
SHA1: 4a302111c931f27c3f46dfcccc12a7b3a63f6fd2
SHA256: b186a266e33086bd3fc7df4584ecb4f8b5f13e83444077dd38a95c41d393140a
SSDeep: 6144:2huRNh2uasnj3KLDQftGNeJta2QL/DrjmXvnFM5DfTQvt:Lr4EF4tlL/DAfFgIl
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds Cache\index.dat.RYK MD5: 4a66d42b1c0374df36b51bc2d64a46e7
SHA1: 8fd22bc516e9f467700bcfd5c402a0cec2c2b007
SHA256: 8358f51f070eb6842ddf2087b014b0050821142fb64c1e25e57c4eb7c5ec0f9f
SSDeep: 768:03Fe+uf+9tVYHAjzwaahzQwcjcHYgSJdtkJjZ9rqEKBy/6:0VDN93yiwPhzPcjcaYN9mEKK6
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds\FeedsStore.feedsdb-ms.RYK MD5: 27fad7cabba2b3e4b4aa6695cfa72e16
SHA1: 6196af252383604baf5c3eda7a65d45fcd4f458b
SHA256: fa3e012bfb3976682e9d57245ed34cbceb1c038531dac53dfdd927b058558777
SSDeep: 192:SgYIs1x8MVguNv3a405OutBwgttKwSk9llIu:Sb17Wcv/MnttK690u
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT.RYK MD5: e33abb98129de8b99cdbccdb4269a14e
SHA1: 630ba6e3d8a513cc908b9ae6cf225ee262b776f9
SHA256: 8f8a3bd74a413ae74ab04b34c56a8f1d7ed1e08a9faa94774dd154e998112c97
SSDeep: 384:aoTwIv0WkmZYNDmTntmxvu0m0oGFCMhpFZEr:bTbhkCkD0ntmxG1GNM
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\brndlog.bak.RYK MD5: f646a6773a96334a32d5ebdc54787971
SHA1: 8e90bee17c582c24ce64df6a4b65a8f591234c42
SHA256: 5b2f25497b4f23c8d2ee737d367db1c8e2789f01c42c75c08e96089b1712e7cf
SSDeep: 192:W2h6n5XpF8OVqvtuCnz/UM/dTz7iswGBRJG4pAwiyTehSZB7ZGK5Gd04x:u5ZZOFz/UM1hw0Rg4pLe2UEGdlx
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\brndlog.txt.RYK MD5: b5df6227fe29fac8c71ddfa3e6d410a4
SHA1: ebf1d54c3e7a5146134078c7dd03ecdf40eb2d5f
SHA256: 2e1d398746093a08574218536fb921ae64a6b751f89b3d5e5fd3f7fb8884cc73
SSDeep: 192:3UwcCIfa5NfcJdZgZ1NXjGbwBYHcI7JmLdGEHA/YR3tERE6wrPvX2tbvMhEsn+cs:Ccfc/OR+Hx7JavFIRuPutbv9e+5YqH
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Media Player\LocalMLS_3.wmdb.RYK MD5: c010815186b36602f227207394a05ac2
SHA1: 97dd50675c93019b64e2980084365e1d1a390899
SHA256: d91da7f27a1cfe4ee0b76d4d96fe65ccd0c999e2c5d2144e24991378bd6aa3b5
SSDeep: 1536:IoosMjcNhcPrbxue6ueI7j5kvzjGBHwG6TxuSZ:7ovpx56uLPoziBQHx5Z
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Outlook\Outlook.sharing.xml.obi.RYK MD5: b2e8b725189c8e7cb7b23ce9983c061d
SHA1: f6b6c78f0f560805e7b3a613ba4797cdf9357a8d
SHA256: 4888a19b9bd143f81c76959ea7c0f66c75ebc354183dc6e54e15c4079a8c5f7b
SSDeep: 12:t/wvShDMJmcRbOWqvO2sHZoyEB8ZSzapyBzh+5PmMOXUOI1BP/P:tySqdIv0BEBMDyBlKjOWBPH
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Outlook\mapisvc.inf.RYK MD5: ab2288c1a8af85be8e193d549be331b2
SHA1: fa6d881e1148400510adf43f2e68019d92772e5c
SHA256: 43dbb25824681c6314e03750abaf9428f7b3e17e1660995bd571deb3dceff83d
SSDeep: 24:oLU2EKCbZX8rIkYhXtWoY3VEQ2dV/pH2yCKw4T2yNQ+BufjAEJVWb7jf/45A:oLYN9X8rVwdFY3VE13BH2D42hwoVWzfV
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Visio\content14.dat.RYK MD5: 5af9a92b975b057860e50ee0e5874b8e
SHA1: 9fd28b953937ce8d2f5577d723cb9849cc2209eb
SHA256: e5d39c23f62ddc52e3cd38778dd792c6191aa21c16b6052f28116d9e7475dcbb
SSDeep: 3072:sUCBPKvQwCSbTrveIPXrJQ8kEH/gT3A/onO:mPaQwDHFX9vkEH/+A3
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Visio\thumbs.dat.RYK MD5: ba7d03d54ac8fb4990f6182a107a3be2
SHA1: f9fd17d1a0e0ca173fbbcaff3bc59e7494a8efe9
SHA256: 745b446bdbf106d70760fe8fda1eaec74f0a2ea5ac1702e4f7a63d110ab9b321
SSDeep: 3072:jzWqoJe+YVEd7xMFvcc3pN9pPalAcibNzr/Lmp3OP:/kbYVEdNMFvcc9BQ7ib92pa
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\edb.chk.RYK MD5: d2761f8cbb37fcd3df85a0ef89f23de5
SHA1: 9161e4c717dca13cfa5044b18e763c3ec34280ad
SHA256: 10bcd6502204de9fd76ec4effaf3da32aabaefc05a3cc3957436b448878e6d4a
SSDeep: 192:v8vxfl1OU7wXuAi264kk4helRmoVvYojXb:u7cU7AuP2shEm0YojL
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\edb.log.RYK MD5: 784d8f2a43675f6a526398cd7b549434
SHA1: d30b4033994013f4d1d78d2df34d5b2a8ca90b39
SHA256: 259155b6d1d7e6d11782fa28f481d32ce1dc208141dc863343420e025953cb69
SSDeep: 49152:VfkuplDmOpH4xo0reaVbUVY+Yn0hc4YXyEwEk38zHpmW:Vfkup99x420dVwYKhc4mkszJv
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\edb00001.log.RYK MD5: e5dfd2253a1bf8c7c7abecb5c2da7172
SHA1: db8fbb3b69815c61ee7c676cf36dcb37543ec9dd
SHA256: d1e6470cfc9d92a76ec94c497949ab7c6ba1954934e53be53ade43a427ed99e9
SSDeep: 49152:eps4Yd8izap6DzeU2bXbXr/upJVC5VvOoDIGGA6OMX6oWvfVs:eZYd8i9DzS/r/WuzEGGAtRe
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\edbres00001.jrs.RYK MD5: 862805e3c42a3fe6be0bbb55f0715414
SHA1: 48f2f2c3348940fdbfcc7776bccc00e9a91c30f5
SHA256: 44a549efcdb3cf27d3b879c5717f630b8f2e635a89a53e2fbba9a28d9326fd47
SSDeep: 49152:usyZ9Dz2YRoli+lGc8jjJ3zzL1oGrOLSJZxseLDq:usqHHRo+jjJWUse/q
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\edbres00002.jrs.RYK MD5: 2f2d90ba745d5595b35a5e14aa75d4dd
SHA1: b1d2f051cd95aa5da84861934ede3fb4aa0f6cfa
SHA256: 7e100dad0159280c2982d59de20e2a182f6300f28f6cc029853e485a80421080
SSDeep: 49152:BahfmJOwLm2qyvizi0c99scM754YTPYg6q6XmcE:BuGvizNF95pTP12a
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\oeold.xml.RYK MD5: d69af73d3ee9fb3d02feb1fe932cbf68
SHA1: 9b41885cc990d109590ae9c8b8ca532205ca4111
SHA256: 3ac5a0ad53f1dd879fb7c8c45419b7a7d9a980325ff63c4fca7010a87ded8e7a
SSDeep: 12:ky4YxcVAhFZaeO3L8NwX7ryRucsSSkcanmwDfe:ky3hFZ12IS2FSkNDW
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Media\12.0\WMSDKNS.DTD.RYK MD5: 1e68d1b07f68f2cc601d011c4f0bacba
SHA1: 8afd3c09e23c6f60914faac2d7d6291a2dd2e85e
SHA256: 47e7fb85e026424bf4acb49ac4b3b5012e8226eed990b53d6f11e2ad10030ff1
SSDeep: 12:ZQGZDIilBDC+onbKOTOVyJH4/JukujPzALflPlj9btLf7qvyLYZ5LRbuHKhCcIYY:ZQkDBZC7nT2ukuOf1lj9blDqvAOJCcIx
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Media\12.0\WMSDKNS.XML.RYK MD5: a14a8c2206889ca1d971959fa76fcfc1
SHA1: abeb2d7193b257149fe9ed3339a0451b47a4892e
SHA256: dbf6ff7496f66c6a82424f712eb01085ceab677be83ab17fac7d4b5716843d6b
SSDeep: 192:C1ZrVb9FdyXVbWg5VMUoGkTbtNAZamhv0cqNpKHGsa35n:8ZZh3cbmWaAZaaUp7B5n
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\8OnfPdimQJ1oV69i.ods.RYK MD5: 997db670f369e0fbc1efb9220b756d06
SHA1: b77093222896c28f8963ee54d85f5859bc45bfca
SHA256: 13848cbdc06db11df4ae1fa064582e593e3d34d31d475edcbf7927fed29afe35
SSDeep: 1536:6Nyp9Zxw/sz9DIVsr0F9Hh0iFMlEdSZ+fSwSQS/bkHEf9:6NypPz6V59Hh7eG0RFGHE1
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\FAJJOjsKKwFQuQmBLG.avi.RYK MD5: 9f1506f46631ea917c5e04d2f6d4a779
SHA1: ddbb09ec86789b78f8f64277c0e3b7aa3a7ab138
SHA256: c8ce3d32ec37006a7e6b93c6f38eade5311218277e3ea3bb320696c30ce57f93
SSDeep: 1536:y3bOnrIXPHYnM4w0NXt/frxlQLkwiffpHPs/nVzLK:y3IrIXPuw8XtnrxlQAwiN0vo
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\GpoONa1hcR_pTtHiFH.bmp.RYK MD5: e8189c8702afa4f0811dbaacae361726
SHA1: bddf2de9ebaea2c97d19e9043d9adb877dc0cff1
SHA256: 995156e1c399a4afa474ec56cb0a95f94f728f21c8bc1f94583604ec2f495658
SSDeep: 96:bnNvnVPtjFPmeutg88l8Dvnrb1DGqU5tORN:LNv1tjFOBgXoH1DGZu
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\History\History.IE5\index.dat.RYK MD5: 5f8754624c5ccabe6ab1976d08897e61
SHA1: 1d6a2f4a5a086dc5ffe6bdceab06b899b6681f35
SHA256: e9d67e2985376c23082a22d17f21b12dcba5a50f6e6ef715d6309843b838cb31
SSDeep: 384:Em5afkhLjvSv9GHlcsGeXh8khhEod4Dv9PkUr4:uEJX3h7W96
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\JCZk0qXoxn7jTifb7.gif.RYK MD5: 7e8e5292df6cabb84c828b88fb52f4db
SHA1: 3304beda0d83427099eb1652432059cfa76469ab
SHA256: e79b80260527e3a8785f2e6a367d8f8f903b7767824bc573c770319bd61627e8
SSDeep: 384:QuQeovNpKjCf0nGrWrEJqzGoh7JonIEN2/pBuKsshv486mws45H9NAnlDqwC:XApKjU0nGr+zroIEN2/p5s186mwsMknS
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\PUCHVIOmt1pJxQHWHf-.m4a.RYK MD5: 8de94b369621962ab4cda76268e936f6
SHA1: 95e88bf58e719a4b0bdf38c533803fa7b1001eaf
SHA256: b80bd1060b537d052bbd54316e4cd3c056efeb5dc6adfb2e9c489d6cdcba5c6f
SSDeep: 768:dWLdD5qirJPTUDk/6TfDbcpz4l/905G8tZ9gi+N8Lg:dgDBJ4Dk/6Tfv+M/i5G8xCP
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\hLqE3Pg09dNdrb82eV-C.rtf.RYK MD5: f8aa71ccc9820b635c5e20b1c277314d
SHA1: 2e9b8c9faedbe703552fcce92ca4ab5f8a389f3e
SHA256: 6083675f79597bb195179e1a0112a2c5a9ad8dec50eb692b6f5d006dd8041d57
SSDeep: 192:rTzL/T/dlM+WP0tbtrh70qTugrlDTi00UrIDNRXuPplCEvy6rOEIQIY9xEqKyEgs:r3L7JWP0tDAqRDmhDNRXyCEvP9VICqye
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\yesmbrqqEk_xCz7ibak-.gif.RYK MD5: 7e20e2927db650dfd4f41108bf1814e8
SHA1: 5ae6013e8d0ce96dc85e5049c67112ece548ff7e
SHA256: fd7af4be8c418023e3c20ef06af1f53eb4337ce2b3944c2e277de8952c661785
SSDeep: 384:5S3Vr0H/G/+2x8aIdCZ4FUSMwZgLKR8ukNhh8JzviDtMHDJZnppgkm72bz82b77n:0lrCG/+2x8aIkZ4FoPNhIdhiVqfwYD
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Low\MSIMGSIZ.DAT.RYK MD5: 9c53a50673bd64f0fedbf7859d8bb236
SHA1: 8a3495ba584155888b84997a58428b2c2b6d835d
SHA256: 7e1b4f91fc3d80e913eb6f63527e8e2e1c80e2f23340db4e74222a8c9cdd6682
SSDeep: 384:WdC0a6FPK8m7DkQ7e+/RBQ1UB5Ru/E11EeJztw:WdCIk7wQ7e+k1cRCEAeJztw
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History\Low\History.IE5\MSHist012017071220170713\index.dat.RYK MD5: f721207188d49244dcd9f46b4f870d02
SHA1: 332e606f653de15a5be5be263fbdf07751082000
SHA256: 6751b70e91bb4a9ed13c9f83f0dd104e8f20e8139ae7a4305c9164774d07a554
SSDeep: 768:xgG25uzryEoqnUA2BZHm0V9NVWyFYisRd1f4DxkV6m:xgG2yH2rZhFY1d1Kul
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds\Microsoft Feeds~\MSNBC News~.feed-ms.RYK MD5: 3e17da1a97a776d39d60752aff20165d
SHA1: 3d36b976456390e305b87e98e6260a7ae20b7609
SHA256: 9efea8aca404f35d195db584c7a99c6f3039f3d06bcedbc1075ddc3dfda6c789
SSDeep: 384:hjXjRiOxkvIE04mKqiqKAjrQt/oRZKRZ9FPmD+U4I3CPsPQb57HgzHSB2Gn67H:hTjUFp0t+jkEJfPDU4I3CPs4JHgzyw+2
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\index.dat.RYK MD5: 1e47c3cf0b52306eeeb53fece62e68a1
SHA1: d5252e30422aa468341dd09596a5e66dd910882e
SHA256: dcb06676789252430e363e3bb241cf63d62784cb89c48084b0ccdb8fea63750b
SSDeep: 768:ov2HTH4NsUQCgtY0EMhvMkhC9nkl5XWcaT7OhDtr0Mssof:ovQCQCgtY/evMeC9klhMg6bsof
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\frameiconcache.dat.RYK MD5: 6e8dedd9e59a227c10a9e67469b051cf
SHA1: 99fa4413fed516d31b6495a8423d898308fba94b
SHA256: a9db11f373642c7df26549d5a3fd2cc9f46b618b52d2eba267b00f3006c37238
SSDeep: 192:wtaDynSHmz8a8TVkwIBF2eEz9TYxNkoeuGWiGd9+d+FvX8A:wtaDyS+gEj2eEz9ExouGWi4MA
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Media Player\CurrentDatabase_372.wmdb.RYK MD5: 684c6b59113f605037869dd6ff3a0c14
SHA1: 2b9ef7d17e5690506a19ce9583ad8dbeaa2a2f12
SHA256: 24d06875b5922ec5ab7a3bb70813f0f33e77403aacd1cd163aacf59d03f1fd38
SSDeep: 24576:AGCQxZyBDg2tcbzfXcDlhCVBruV1IQNzHhM8D8tVwbRlDS:CBrcnfXcD7CcNzHUVQw
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Office\14.0\OfficeFileCache\FSD-CNRY.FSD.RYK MD5: 4b392c9f8c33e7ab9c94577034406fda
SHA1: a06eabf78cc4011667350e2dcb7251462b92bfc3
SHA256: 201e9af65d7b89987c01d80aef3b3015f3d5c5a0e9b0169d746807200bed532f
SSDeep: 3072:Gbx9P/8Aglxj68K02WJWohdCni5G27QPOKChwg7vP7m4OC:GF9P/8Aglx28K02QWohwi0FPOPhXn64L
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Office\14.0\OfficeFileCache\FSF-CTBL.FSF.RYK MD5: 42f09df0d3388c9bac8a096417eb5adc
SHA1: 4c25307c284d8c03e0108058629edb836a9defc6
SHA256: 6e9ba691c6286868c689bafecc94b6c503f776b004a30d58c3f13afe124c2941
SSDeep: 6:sACAXhXWnoH//pa8rO2XXKMx3o4FCWi9JhppOshX/e+GglFt326uQ34NTEUiUYNx:sTAXhJv3xO/IshX/MglFF268oNYQm3U
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Backup\old\WindowsMail.pat.RYK MD5: 8b91bc0ab22776ffd30602d8f8734e02
SHA1: 913fdea8ad12f49fa795fb9261eaf0e6ab13a419
SHA256: 4cb6b933e08315a00fdd70edc6c1ffa3e6f168a80ffa6dd1d32f33be467cf00c
SSDeep: 384:G01PudXlj6Yq1LG/1wRHE+pT+wO5LsPtgU9DwIQf2uH0m:G0FudVj6Yw6/16zh+1KBDwxf2G1
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Backup\old\edb00001.log.RYK MD5: a98945e6502e236c7f1d4a783517e975
SHA1: af558d32d326f744ec9af2b3ec371dc0efdeda02
SHA256: 428bfb62af8176f321c2a3d58b3dcac7d4ef8e10b7b7cc97958669734208ebd6
SSDeep: 49152:C7rb6ACbkTLHibJQr3wPd+0Iu/BnNnEpfDYDdUzQk6Tt:C7FL+QrYdd/BiJEDdEQk6Z
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\Bears.htm.RYK MD5: a7cb9076e27d88813ea10d5b23e7ffaf
SHA1: b285b2971bb4eb2204952833776745693a529476
SHA256: d5bf423f9c335568e53f02453346193fca7a6cb3f7cdbd43337c17c91102fdba
SSDeep: 12:ppZXzEI8jlhiZvKmCfyOaUWevau5LUkDUJyT9ktzClvJTfcgBq:7pzhoAZzjUFvnLUOUJy+tzmpc
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\Bears.jpg.RYK MD5: 101661aabbd44047e365fb96a3f80d77
SHA1: e666d4334bb7486250a933eb2fdc428aa55854ac
SHA256: 5a44cf052fa8802875a55ddecf0730afe5bbcba64e22cf62e0d679a09cc7c52a
SSDeep: 24:QwmzbsdwhGfKhD+g8ub+N5OdCXosdRHAP38xm3+rUxC5M:Qw6ctO+3OdYougPMxmGM
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\Garden.htm.RYK MD5: 7b1a8facebc8ca6416084ca9751cea22
SHA1: 19ba1b082aa56c91059a95428e565eca6890eaea
SHA256: f0f07f2b54edac1568d83fb41a317ba7316edee29409104126336970df190466
SSDeep: 12:zygUwU3sJH2iYoZluhNnUF1yB+lccIO2NTr+M:+AdHXW+1yB4IBv
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\Garden.jpg.RYK MD5: 412b42566cf9682f7307c50dac5da7a7
SHA1: ea3e8ffddbc6b65d8d73b3a93689c2844cd56807
SHA256: f91706f6a4ff359a6ef36b1626b138f88190ada1cf91370d8697cdefd381597c
SSDeep: 384:EbPoMTbpICuHitQpxanjWmNuFhklKIUnThLO56Bg8V8dEbJvmnqsuXN71+T/BRmX:MoMnpr3tQpxRX7g8VWElIut1+T/7mVTx
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\Green Bubbles.htm.RYK MD5: bfe23052d074180fe1478a717e149981
SHA1: 3b6784978019280df2ea0ccafbe11014c71b5c0e
SHA256: 50cdb721822301add2164eb447d6fd73dce5d85d9f37c53cf10b3fe94a906eec
SSDeep: 12:eCqZPIjhEAL3buqps3fAfrEvdcjksskBsC04Lp+xZrrG2d:Fq1IjhEuDpsVvmgsskPwPG2d
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\GreenBubbles.jpg.RYK MD5: e1e743432733e2b365729114e1411d6c
SHA1: 76feacec1b776e13dfe08ffac53f56508792d57f
SHA256: 9e77d5ee6728a962205c1ce140e72fcdfbd19256aeb34cc5e2d87cab0f67535a
SSDeep: 192:RkYgEvCrWqw+mQs4Hh8MrVMMTwEAxCwZwsAxkVAV:xgHrWqw+mf4BVBNwfCkC
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\Hand Prints.htm.RYK MD5: a65db87d31be8c8683ae538f9bc0160c
SHA1: a9b931945491166fcbf15f6cac9b7ddb1929ca46
SHA256: 86c23b0186d10d67d46bba69ffca3b50d606e1f1e79c22db0d1c77e20782866b
SSDeep: 12:8IgR4jDmLCpOgkb3Dh6RRkTcJuz/0n72UJFN1:8LWj+tr3DsRRkYJuz/c2UJj1
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\HandPrints.jpg.RYK MD5: 416f4e4936776b0e084b3698090d1b64
SHA1: 945d971620ae41ff1d86e425957eb934cf71c347
SHA256: a5574e74c530b5ae7656010db4bf7248cdf98c5d502b3deb28f63fe94b788736
SSDeep: 96:B9K8GhsHsbsVNzNzPpnjSxmLssRDwoTfrrD3H0bH:Bkrh9MNnLss7zGH
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\Orange Circles.htm.RYK MD5: 83f191cd3d3e112cecc0fff2497a4472
SHA1: 3719fff3cd39985d69e585d44daf9ee79b55d09b
SHA256: 37a32e79664269631cc70d15b2381f557e9bf21923e46228a13dc04c189fd2c3
SSDeep: 12:09lCpY1JRYh/Ny5p2RiMGzxPTwpdTgrfGDZqi6:09yYvY1I54YM6P+2rfGFqL
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\Peacock.htm.RYK MD5: 5e4b6f5a5d914b4cc5dfe2d1db0473e4
SHA1: 10f5b30df410fcccd6d490a411877f0b256e1a82
SHA256: be8321b8ab0fa045a6212aec676bbab430af4f099b6216c6f22d8f21ba672ebe
SSDeep: 12:LK6Zdq8L1rf/EvpNIEuY/5s+SSqo2Qh1tyKJx:m6Zdn1Evp7LFZqo20yKj
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\Peacock.jpg.RYK MD5: fb1358a64f97c2e79d1521592b8ed833
SHA1: 62501a9e3e8ed436d4c57fe6020fbce32fff9933
SHA256: b63d568b70c7080d92e80ba0622358b39430c52db26c64580da58ebbb124e8b3
SSDeep: 96:0rQU+rAix3rw2UaJiOCYrhm+fh9reOZ1pBL2sIXgoRlfJFuVfA5kqonO:yQlrAWbzJJiOt5f/imVxIXg6l2V459oO
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\Roses.htm.RYK MD5: 8db137dee61f6c1dd0765db5e5e40e71
SHA1: 055a5b309e5398c3639e582a5a08c4efef34e18b
SHA256: 8fe7b1e5db6ddfcc4544cb5d70ea48c74a313eb6206130973a7fe4439f84aa6a
SSDeep: 12:LMxZkjjMpjb9USVaP1kbJuA1+A/NeG44kW:LMDIW9tXbsFGfkW
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\Roses.jpg.RYK MD5: b137f59d44a773405be62e0b3c735cc2
SHA1: 9bb9129fcb7ab4dd05be74d561bf01253452e079
SHA256: 66c57513549aee20c0e0da7ae310f8f569e85b7898b5208f24e7c8df2c442e7c
SSDeep: 48:Y1ufgsa8FHDV8o/GQYQDeiz4Fh00m1ofHOUbj1Qc:qF8DVb/GRC34FHmSv
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\Shades of Blue.htm.RYK MD5: b6c7d324a2283497a0f41207da921106
SHA1: 3c5b89feae72d2f0037affd4e87e96e58d3646c4
SHA256: b9fe96b2e6f50bbeaaa24b38147cc4df9abe6058495b69fa732c8a5bda91359d
SSDeep: 12:8u/ZF5IGK9ldxQg84xBxrSoeAO2gUzWooUXZtdB3oEA:8u7KGK9ldxQgtzrSQOwWooO7dB3oN
ImpHash: - 		Access, Create, Delete Dropped File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\ShadesOfBlue.jpg.RYK MD5: 9aff0aed11b86cd13ac21f453165dfc8
SHA1: 9c407b22729888a32998b001b4caddf487d41d13
SHA256: 07b02b941c6b04cb8167d7cbe0610c54883c45b127d8bb51bcf8ad5cd618dd98
SSDeep: 96:nDpQBb3bcyD6uOmSkVe5iIlkkQgdgF+QzSS9cIW5Jjj2vFmRapQ:ndwTbcwrO5CAllJm19cIWDUmb
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\Soft Blue.htm.RYK MD5: ee41c2e2ec0117dfe40d51c6d1bd0750
SHA1: 67afbb5e800a115a823bd1ad305fd12c79af1232
SHA256: 7b4d63761b9296960131cde1e88a71696632fbdbb95cfc87ca2dc4c21233a0a4
SSDeep: 12:7Z/bp4prIZ3x+JM9Ta0xxgFshCZ2UxC4MZfHdUl30fa6Kn:d/2pru38amsgFzx1A2l3+ax
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\SoftBlue.jpg.RYK MD5: 9b93eddba3ec487839fbe9953cc392c2
SHA1: d69d4278d7d1382ac27945cb98d8108ff6c3009b
SHA256: 8ad72a6ebd9a8f749a8df56c2b5204ba4f004431a2c3de5bbc8e6a96b5aa0f62
SSDeep: 192:qWEsKIEvUu0mOy23SoSlEg6y+kksu203ch7JOLG9H9A1DCAB1q0b58axlIrJcc8k:2sNmSSV6gdHuDcZJFiDCC1q0F7x+NcPk
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\Stars.htm.RYK MD5: 9359ed8ba223a7a729ac4da35d6f32fc
SHA1: 5e5e2844271819195aadc613aae813e4acc2708d
SHA256: 2431d3263397a20a1ca1c4b391a4ab6d3c1622971293fb1fd0472066f725d0bb
SSDeep: 12:yMOiwczWPuNUXhD9WECXoes0ag4DA7mnhDFuP+D335x:ylvP7VCXoe5nYA7mZk+D3/
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\Stars.jpg.RYK MD5: c8eda76315b78b920cafe2398095e57f
SHA1: 52c8aad4bda26d4de36d3b4f8d6418d5cb84d6a8
SHA256: fd4f15ce19fcc71c2da806949e8200df4303db3da572e9137af12aca9aa9bac4
SSDeep: 192:gwBkuaBiF/ITnX/djq1Ar2iN76Tc23v+YNXAHVCP7nwm3c4tyP:gM7IZJNuv9NXAQkgc4tyP
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\WindowsMail.MSMessageStore.RYK MD5: 443863eea187282692d6077dc583c8b3
SHA1: 414d65800ee75d50269c050f53a0d079aa8ef866
SHA256: 565949ffc8075d98136d1e80feaef7c3305c12849dc1a88cd92fd74f3cc79011
SSDeep: 49152:cEic/4nWEvBXJyOV+0Q2iYHf4NBIrs/sjvjJgEDWXMc:ctWE5XJXVRi3BIUsb9hWXMc
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Temporary Internet Files\Content.IE5\index.dat.RYK MD5: e907dc7698bcd5d9547c5a5d8cfe5bcd
SHA1: 5a2c7bfc849fb1c6b32174c94ed0aa43cab38f2b
SHA256: 4d276ab6e625ebfbd15c39bbcd8dd6a8894f6deb139dac60ee03126165989f68
SSDeep: 768:dZqy49NuDw8gR7blLTVSXynXkUHDonykPpfnN4xne9cmMYsOs/KIH1J0zK:7T4juDwzJwUXZHEn7N+nIO3OlIHQG
ImpHash: - 		Access, Create, Delete Modified File
Malicious
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\vV.exe MD5: 8478f4386e551db671282e747645c287
SHA1: b72059187cf67549775d71b6de33096169dc5ce7
SHA256: 82d87cefdaa7fc29026a710f9c6514a5b5734b1375403d54c6c2819ecc22377a
SSDeep: 3072:YpiYM3AmDXSsGaJRm65RgMXT40uUEMzjVgcD:NtXpR1LljBhgc
ImpHash: c77de81f016d2fafb0d7d8d02bfc4476 		Access, Create Sample File
Malicious
C:\Users\5P5NRG~1\AppData\Local\Temp\RyukReadMe.html MD5: 3b2958eaabff2ef5ac8013f60fefb520
SHA1: c0f435c945efd7b2603f6564f7e31783075d8cf2
SHA256: e15c038a767eacef8c90975b3ca86495766f91c34082c9a4d1cbf2eabd6313d2
SSDeep: 6:qzQc31zQhBKFpK+2/69vW6328eIHySC8Gqs5HtHtr+EsyeIsILvgstXhaM:kJlzqqK+2/8bHeIH/GJHbr+OsKXUM
ImpHash: - 		Access, Create, Write Dropped File
Unknown
C:\users\Public\sys MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SSDeep: 3::
ImpHash: - 		Access, Create, Delete Dropped File
Not Queried
C:\Boot\BCD - Access, Delete
Not Available
C:\Boot\BCD.LOG - Access, Delete
Not Available
C:\Boot\BCD.LOG.RYK - Access, Create
Not Available
C:\Boot\BCD.LOG1 - Access
Not Available
C:\Boot\BCD.LOG2 - Access
Not Available
C:\Boot\BCD.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Acrobat\10.0\AdobeCMapFnt10.lst - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Acrobat\10.0\AdobeSysFnt10.lst - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Acrobat\10.0\Cache\AcroFnt10.lst - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Acrobat\10.0\Cache\RyukReadMe.html - Access, Create, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Acrobat\10.0\RyukReadMe.html - Access, Create, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Acrobat\10.0\SharedDataEvents - Access, Delete, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Acrobat\10.0\SharedDataEvents.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Acrobat\10.0\UserCache.bin - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Acrobat\RyukReadMe.html - Access, Create, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Color\ACECache11.lst - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Color\Profiles\RyukReadMe.html - Access, Create, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Color\Profiles\wsRGB.icc - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Color\Profiles\wscRGB.icc - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\Color\RyukReadMe.html - Access, Create, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Adobe\RyukReadMe.html - Access, Create, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Adobe\Acrobat\10.0\AdobeCMapFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Adobe\Acrobat\10.0\AdobeSysFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Adobe\Acrobat\10.0\Cache\AcroFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Adobe\Acrobat\10.0\Cache\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Adobe\Acrobat\10.0\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Adobe\Acrobat\10.0\SharedDataEvents - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Adobe\Acrobat\10.0\UserCache.bin - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Adobe\Acrobat\10.0\UserCache.bin.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Adobe\Acrobat\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Adobe\Color\ACECache11.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Adobe\Color\Profiles\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Adobe\Color\Profiles\wsRGB.icc.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Adobe\Color\Profiles\wscRGB.icc - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Adobe\Color\Profiles\wscRGB.icc.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Adobe\Color\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Adobe\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeCMapFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeSysFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\AcroFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Adobe\Acrobat\10.0\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Adobe\Acrobat\10.0\SharedDataEvents - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Adobe\Acrobat\10.0\SharedDataEvents.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Adobe\Acrobat\10.0\UserCache.bin - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Adobe\Acrobat\10.0\UserCache.bin.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Adobe\Acrobat\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Adobe\Color\ACECache11.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Adobe\Color\Profiles\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Adobe\Color\Profiles\wsRGB.icc.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Adobe\Color\Profiles\wscRGB.icc.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Adobe\Color\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Adobe\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeCMapFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeSysFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\AcroFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\SharedDataEvents.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\UserCache.bin - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\UserCache.bin.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Adobe\Acrobat\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Adobe\Color\ACECache11.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Adobe\Color\Profiles\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Adobe\Color\Profiles\wsRGB.icc.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Adobe\Color\Profiles\wscRGB.icc.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Adobe\Color\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Adobe\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeCMapFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeSysFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\AcroFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\SharedDataEvents.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\UserCache.bin - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\UserCache.bin.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Adobe\Color\ACECache11.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\wsRGB.icc.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\wscRGB.icc.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Adobe\Color\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Adobe\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeCMapFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeSysFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\AcroFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\SharedDataEvents.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\UserCache.bin - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\UserCache.bin.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\ACECache11.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\wsRGB.icc.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\wscRGB.icc.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeCMapFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeSysFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\AcroFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\SharedDataEvents.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\UserCache.bin - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\UserCache.bin.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\ACECache11.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\wsRGB.icc.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\wscRGB.icc.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeCMapFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeSysFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\AcroFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\SharedDataEvents.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\UserCache.bin - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\UserCache.bin.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\ACECache11.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\wsRGB.icc.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\wscRGB.icc.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeCMapFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeSysFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\AcroFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\SharedDataEvents.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\UserCache.bin.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\ACECache11.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\wsRGB.icc.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\wscRGB.icc.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeCMapFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeSysFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\AcroFnt10.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\SharedDataEvents.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\UserCache.bin.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\ACECache11.lst.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\wsRGB.icc.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\wscRGB.icc.RYK - Access, Read
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeCMapFnt10.lst.RYK - Access
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\AdobeSysFnt10.lst.RYK - Access
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\AcroFnt10.lst.RYK - Access
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\Cache\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\SharedDataEvents.RYK - Access
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\10.0\UserCache.bin.RYK - Access
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\ACECache11.lst.RYK - Access
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\wsRGB.icc.RYK - Access
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\Profiles\wscRGB.icc.RYK - Access
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Acrobat\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\Color\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Apps\2.0\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Apps\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Deployment\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\GDIPFONTCACHEV1.DAT - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\GDIPFONTCACHEV1.DAT.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Google\CrashReports\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Google\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History\History.IE5\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History\Low\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\IconCache.db - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\IconCache.db.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft Help\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\4vFdHCcYxKg9t.swf - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\4vFdHCcYxKg9t.swf.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\8OnfPdimQJ1oV69i.ods - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\8OnfPdimQJ1oV69i.ods.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\9xTcx7.m4a - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\9xTcx7.m4a.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\AdobeARM.log - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\AdobeARM.log.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\C02rO_EXKCJ.flv - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\C02rO_EXKCJ.flv.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\C0yl.swf - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\C0yl.swf.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Cookies\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\F5GmmRy.ods - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\F5GmmRy.ods.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\FAJJOjsKKwFQuQmBLG.avi - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\FAJJOjsKKwFQuQmBLG.avi.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\FXSAPIDebugLogFile.txt - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\FXSAPIDebugLogFile.txt.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\GpoONa1hcR_pTtHiFH.bmp - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\GpoONa1hcR_pTtHiFH.bmp.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\History\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\JCZk0qXoxn7jTifb7.gif - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\JCZk0qXoxn7jTifb7.gif.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\LIyP-VvAkJYVi0.wav - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\LIyP-VvAkJYVi0.wav.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Mg61.avi - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Mg61.avi.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Nc0ol7M.m4a - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Nc0ol7M.m4a.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\NkMy9gF.mkv - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\NkMy9gF.mkv.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Ny0GbNFJr_.mp4 - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Ny0GbNFJr_.mp4.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\PUCHVIOmt1pJxQHWHf-.m4a - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\PUCHVIOmt1pJxQHWHf-.m4a.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\T5jnPlZD.wav - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\T5jnPlZD.wav.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Temporary Internet Files\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\WPDNSE\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\ZbD9ldUd8UppQli.ppt - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\ZbD9ldUd8UppQli.ppt.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\bbzDvO6Ui4.wav - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\bbzDvO6Ui4.wav.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\fl9MSZQauGMSGwD.mp4 - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\fl9MSZQauGMSGwD.mp4.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\gI4Q.jpg - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\gI4Q.jpg.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\hLqE3Pg09dNdrb82eV-C.rtf - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\hLqE3Pg09dNdrb82eV-C.rtf.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\n9ZbWQ05MT.mp4 - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\n9ZbWQ05MT.mp4.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\nVi9nD.mp4 - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\nVi9nD.mp4.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\rUGVt-DFliBQns.pptx - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\rUGVt-DFliBQns.pptx.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\wK2Uy-8.xls - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\wK2Uy-8.xls.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\y4699rII-.doc - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\y4699rII-.doc.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\yesmbrqqEk_xCz7ibak-.gif - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\yesmbrqqEk_xCz7ibak-.gif.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\VirtualStore\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Apps\2.0\DQQ19BCJ.JAX\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Apps\2.0\DQQ19BCJ.JAX\YVORLGOR.PNT\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Apps\2.0\Data\CJW3O3KP.BX7\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Apps\2.0\Data\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Apps\2.0\RyukReadMe.html - Access, Create, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Apps\RyukReadMe.html - Access, Create, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Deployment\RyukReadMe.html - Access, Create, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\GDIPFONTCACHEV1.DAT - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Google\CrashReports\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Google\RyukReadMe.html - Access, Create, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History\History.IE5\MSHist012020010820200109\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History\History.IE5\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History\History.IE5\index.dat - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History\History.IE5\index.dat.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History\Low\History.IE5\MSHist012017071220170713\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History\Low\History.IE5\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History\Low\History.IE5\index.dat - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History\Low\History.IE5\index.dat.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History\Low\RyukReadMe.html - Access, Create, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History\RyukReadMe.html - Access, Create, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\IconCache.db - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft Help\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Credentials\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Event Viewer\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\FORMS\FRMCACHE.DAT - Access, Delete, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\FORMS\FRMCACHE.DAT.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\FORMS\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds Cache\1NBUR4HR\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds Cache\6ASVN7J7\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds Cache\D68G7BIJ\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds Cache\KQMHSVKD\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds Cache\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds Cache\index.dat - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds Cache\index.dat.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds\FeedsStore.feedsdb-ms - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds\FeedsStore.feedsdb-ms.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds\Microsoft Feeds~\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\IME12\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\IMJP12\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\IMJP8_1\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\IMJP9_0\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Media Player\CurrentDatabase_372.wmdb - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Media Player\CurrentDatabase_372.wmdb.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Media Player\LocalMLS_3.wmdb - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Media Player\LocalMLS_3.wmdb.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Media Player\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Media Player\Sync Playlists\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Media Player\Transcoded Files Cache\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Office\14.0\OfficeFileCache\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Office\14.0\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Office\Groove\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Office\Groove\System\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Office\Groove\User\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Office\ONetConfig\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Office\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Outlook\Outlook.sharing.xml.obi - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Outlook\Outlook.sharing.xml.obi.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Outlook\RoamCache\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Outlook\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Outlook\mapisvc.inf - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Outlook\mapisvc.inf.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Publisher\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\RyukReadMe.html - Access, Create, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\TaskSchedulerConfig\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Visio\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Visio\content14.dat - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Visio\content14.dat.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Visio\thumbs.dat - Access, Delete, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Visio\thumbs.dat.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Backup\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\Stationery\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\WindowsMail.MSMessageStore - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\WindowsMail.MSMessageStore.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\WindowsMail.pat - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\WindowsMail.pat.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\edb.chk - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\edb.chk.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\edb.log - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\edb.log.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\edb00001.log - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\edb00001.log.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\edbres00001.jrs - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\edbres00001.jrs.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\edbres00002.jrs - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\edbres00002.jrs.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\oeold.xml - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Mail\oeold.xml.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Media\12.0\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Media\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows Sidebar\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\1024\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\1033\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Burn\Burn1\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Burn\Burn2\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Burn\Burn\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Burn\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Caches\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Explorer\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\GameExplorer\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\History\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Ringtones\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Themes\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\WER\ERC\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\WER\ReportArchive\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\WER\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\4vFdHCcYxKg9t.swf - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\8OnfPdimQJ1oV69i.ods - Access, Delete, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\8OnfPdimQJ1oV69i.ods.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\9xTcx7.m4a - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\AdobeARM.log - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\C02rO_EXKCJ.flv - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\C0yl.swf - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Cookies\RyukReadMe.html - Access, Create, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Cookies\index.dat - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\F5GmmRy.ods - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\FAJJOjsKKwFQuQmBLG.avi - Access, Delete, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\FAJJOjsKKwFQuQmBLG.avi.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\FXSAPIDebugLogFile.txt - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\FXSAPIDebugLogFile.txt.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\GpoONa1hcR_pTtHiFH.bmp - Access, Delete, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\GpoONa1hcR_pTtHiFH.bmp.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\History\History.IE5\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\History\History.IE5\index.dat - Access, Delete
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\History\History.IE5\index.dat.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\History\RyukReadMe.html - Access, Create, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\JCZk0qXoxn7jTifb7.gif - Access, Delete, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\JCZk0qXoxn7jTifb7.gif.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\LIyP-VvAkJYVi0.wav - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Mg61.avi - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Nc0ol7M.m4a - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\NkMy9gF.mkv - Access, Delete, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\NkMy9gF.mkv.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Ny0GbNFJr_.mp4 - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\PUCHVIOmt1pJxQHWHf-.m4a - Access, Delete, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\PUCHVIOmt1pJxQHWHf-.m4a.RYK - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\T5jnPlZD.wav - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Temporary Internet Files\RyukReadMe.html - Access, Create
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\WPDNSE\RyukReadMe.html - Access, Create, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\ZbD9ldUd8UppQli.ppt - Access, Read, Write
Not Available
C:\Documents and Settings\5p5NrGJn0jS HALPmcxz\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\bbzDvO6Ui4.wav - Access, Read, Write
Not Available
For performance reasons, the remaining 5970 entries are omitted.
The remaining entries can be found in ioc_export.txt or ioc_export.json .
Registry (24)
»
Registry Key Name Operations
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Access, Create
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\EV Access, Read, Write
HKEY_CURRENT_USER\Software\Microsoft\Command Processor Access
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System Access
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\Log File Max Size Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\Logging Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\Logging Directory Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\AutoRun Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\CompletionChar Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\DefaultColor Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\DelayedExpansion Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\DisableUNCCheck Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\EnableExtensions Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\PathCompletionChar Access, Read
IP (1)
»
IP Protocols Sources
192.168.0.1 UDP PCAP, Function Log
Export to TXT Export to JSON
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image