Malicious
Classifications
Ransomware
Threat Names
Mal/Generic-S
Dynamic Analysis Report
Created on 2022-03-14T09:00:00
9f3c1668ee44bfcd1afd599215f5bd73c76609776b78cb04bb6ef1121cc80d37.exe
Windows Exe (x86-64)
Remarks (1/1)
(0x0200000E): The overall sleep time of all monitored processes was truncated from "1 minute" to "10 seconds" to reveal dormant functionality.
Remarks
(0x0200001B): The maximum number of file Reputation Analysis requests per analysis (150) was exceeded.
This is a filtered view
This list contains only the embedded files, downloaded files, and dropped files
Filters: |
There are no files for this filter
There are no files in this analysis
File Name | Category | Type | Verdict | Actions |
---|
C:\Users\kEecfMwgj\Desktop\9f3c1668ee44bfcd1afd599215f5bd73c76609776b78cb04bb6ef1121cc80d37.exe | Sample File | Binary |
malicious
|
...
|
»
File Reputation Information
»
Verdict |
malicious
|
Names | Mal/Generic-S |
PE Information
»
Image Base | 0x140000000 |
Entry Point | 0x140030f8c |
Size Of Code | 0x5a000 |
Size Of Initialized Data | 0x23800 |
File Type | FileType.executable |
Subsystem | Subsystem.windows_gui |
Machine Type | MachineType.amd64 |
Compile Timestamp | 2022-03-04 17:15:53+00:00 |
Sections (6)
»
Name | Virtual Address | Virtual Size | Raw Data Size | Raw Data Offset | Flags | Entropy |
---|---|---|---|---|---|---|
.text | 0x140001000 | 0x59e0c | 0x5a000 | 0x400 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ | 6.53 |
.rdata | 0x14005b000 | 0x19e16 | 0x1a000 | 0x5a400 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 5.26 |
.data | 0x140075000 | 0x4b34 | 0x1a00 | 0x74400 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 3.42 |
.pdata | 0x14007a000 | 0x3870 | 0x3a00 | 0x75e00 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 5.68 |
_RDATA | 0x14007e000 | 0x94 | 0x200 | 0x79800 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 1.45 |
.reloc | 0x14007f000 | 0xe7c | 0x1000 | 0x79a00 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ | 5.26 |
Imports (5)
»
SHELL32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
SHEmptyRecycleBinA | - | 0x14005b460 | 0x743d8 | 0x737d8 | 0x12f |
ADVAPI32.dll (9)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
OpenSCManagerA | - | 0x14005b000 | 0x73f78 | 0x73378 | 0x216 |
CryptGenRandom | - | 0x14005b008 | 0x73f80 | 0x73380 | 0xd2 |
CryptAcquireContextW | - | 0x14005b010 | 0x73f88 | 0x73388 | 0xc2 |
CloseServiceHandle | - | 0x14005b018 | 0x73f90 | 0x73390 | 0x65 |
ControlService | - | 0x14005b020 | 0x73f98 | 0x73398 | 0x6a |
EnumDependentServicesA | - | 0x14005b028 | 0x73fa0 | 0x733a0 | 0x10e |
QueryServiceStatusEx | - | 0x14005b030 | 0x73fa8 | 0x733a8 | 0x251 |
OpenServiceA | - | 0x14005b038 | 0x73fb0 | 0x733b0 | 0x218 |
CryptReleaseContext | - | 0x14005b040 | 0x73fb8 | 0x733b8 | 0xdc |
RstrtMgr.DLL (4)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
RmStartSession | - | 0x14005b438 | 0x743b0 | 0x737b0 | 0xb |
RmEndSession | - | 0x14005b440 | 0x743b8 | 0x737b8 | 0x2 |
RmRegisterResources | - | 0x14005b448 | 0x743c0 | 0x737c0 | 0x6 |
RmGetList | - | 0x14005b450 | 0x743c8 | 0x737c8 | 0x4 |
MPR.dll (4)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
WNetCloseEnum | - | 0x14005b410 | 0x74388 | 0x73788 | 0x19 |
WNetEnumResourceW | - | 0x14005b418 | 0x74390 | 0x73790 | 0x25 |
WNetOpenEnumW | - | 0x14005b420 | 0x74398 | 0x73798 | 0x46 |
WNetGetConnectionW | - | 0x14005b428 | 0x743a0 | 0x737a0 | 0x2d |
KERNEL32.dll (119)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
lstrcpyW | - | 0x14005b050 | 0x73fc8 | 0x733c8 | 0x64b |
FlushFileBuffers | - | 0x14005b058 | 0x73fd0 | 0x733d0 | 0x1a7 |
HeapSize | - | 0x14005b060 | 0x73fd8 | 0x733d8 | 0x359 |
WriteConsoleW | - | 0x14005b068 | 0x73fe0 | 0x733e0 | 0x622 |
HeapReAlloc | - | 0x14005b070 | 0x73fe8 | 0x733e8 | 0x357 |
SetEnvironmentVariableW | - | 0x14005b078 | 0x73ff0 | 0x733f0 | 0x523 |
FreeEnvironmentStringsW | - | 0x14005b080 | 0x73ff8 | 0x733f8 | 0x1b2 |
GetEnvironmentStringsW | - | 0x14005b088 | 0x74000 | 0x73400 | 0x240 |
GetOEMCP | - | 0x14005b090 | 0x74008 | 0x73408 | 0x2a0 |
GetACP | - | 0x14005b098 | 0x74010 | 0x73410 | 0x1ba |
IsValidCodePage | - | 0x14005b0a0 | 0x74018 | 0x73418 | 0x391 |
FindFirstFileExW | - | 0x14005b0a8 | 0x74020 | 0x73420 | 0x183 |
ReadConsoleW | - | 0x14005b0b0 | 0x74028 | 0x73428 | 0x475 |
HeapAlloc | - | 0x14005b0b8 | 0x74030 | 0x73430 | 0x350 |
HeapFree | - | 0x14005b0c0 | 0x74038 | 0x73438 | 0x354 |
GetProcessHeap | - | 0x14005b0c8 | 0x74040 | 0x73440 | 0x2bd |
InitializeCriticalSection | - | 0x14005b0d0 | 0x74048 | 0x73448 | 0x369 |
EnterCriticalSection | - | 0x14005b0d8 | 0x74050 | 0x73450 | 0x137 |
LeaveCriticalSection | - | 0x14005b0e0 | 0x74058 | 0x73458 | 0x3c3 |
ReleaseSemaphore | - | 0x14005b0e8 | 0x74060 | 0x73460 | 0x4b9 |
WaitForSingleObject | - | 0x14005b0f0 | 0x74068 | 0x73468 | 0x5e8 |
lstrlenW | - | 0x14005b0f8 | 0x74070 | 0x73470 | 0x651 |
CreateSemaphoreA | - | 0x14005b100 | 0x74078 | 0x73478 | 0xeb |
FindFirstVolumeW | - | 0x14005b108 | 0x74080 | 0x73480 | 0x18e |
FindNextVolumeW | - | 0x14005b110 | 0x74088 | 0x73488 | 0x199 |
FindVolumeClose | - | 0x14005b118 | 0x74090 | 0x73490 | 0x1a0 |
GetDriveTypeW | - | 0x14005b120 | 0x74098 | 0x73498 | 0x238 |
GetVolumePathNamesForVolumeNameW | - | 0x14005b128 | 0x740a0 | 0x734a0 | 0x32f |
CloseHandle | - | 0x14005b130 | 0x740a8 | 0x734a8 | 0x88 |
GetLastError | - | 0x14005b138 | 0x740b0 | 0x734b0 | 0x269 |
Sleep | - | 0x14005b140 | 0x740b8 | 0x734b8 | 0x58d |
GetCurrentProcess | - | 0x14005b148 | 0x740c0 | 0x734c0 | 0x21f |
TerminateProcess | - | 0x14005b150 | 0x740c8 | 0x734c8 | 0x59c |
OpenProcess | - | 0x14005b158 | 0x740d0 | 0x734d0 | 0x411 |
GetTickCount | - | 0x14005b160 | 0x740d8 | 0x734d8 | 0x310 |
GetProcAddress | - | 0x14005b168 | 0x740e0 | 0x734e0 | 0x2b7 |
lstrcmpW | - | 0x14005b170 | 0x740e8 | 0x734e8 | 0x645 |
SetVolumeMountPointW | - | 0x14005b178 | 0x740f0 | 0x734f0 | 0x584 |
CreateToolhelp32Snapshot | - | 0x14005b180 | 0x740f8 | 0x734f8 | 0xfd |
Process32FirstW | - | 0x14005b188 | 0x74100 | 0x73500 | 0x430 |
Process32NextW | - | 0x14005b190 | 0x74108 | 0x73508 | 0x432 |
MultiByteToWideChar | - | 0x14005b198 | 0x74110 | 0x73510 | 0x3f5 |
GetCurrentThreadId | - | 0x14005b1a0 | 0x74118 | 0x73518 | 0x224 |
CreateFileW | - | 0x14005b1a8 | 0x74120 | 0x73520 | 0xcd |
FindClose | - | 0x14005b1b0 | 0x74128 | 0x73528 | 0x17d |
FindFirstFileW | - | 0x14005b1b8 | 0x74130 | 0x73530 | 0x188 |
FindNextFileW | - | 0x14005b1c0 | 0x74138 | 0x73538 | 0x194 |
GetFileSizeEx | - | 0x14005b1c8 | 0x74140 | 0x73540 | 0x255 |
GetLogicalDrives | - | 0x14005b1d0 | 0x74148 | 0x73548 | 0x270 |
ReadFile | - | 0x14005b1d8 | 0x74150 | 0x73550 | 0x478 |
SetFileAttributesW | - | 0x14005b1e0 | 0x74158 | 0x73558 | 0x52c |
SetFilePointerEx | - | 0x14005b1e8 | 0x74160 | 0x73560 | 0x532 |
WriteFile | - | 0x14005b1f0 | 0x74168 | 0x73568 | 0x623 |
CreateMutexW | - | 0x14005b1f8 | 0x74170 | 0x73570 | 0xdc |
OpenMutexW | - | 0x14005b200 | 0x74178 | 0x73578 | 0x40d |
WaitForMultipleObjects | - | 0x14005b208 | 0x74180 | 0x73580 | 0x5e6 |
GetCurrentProcessId | - | 0x14005b210 | 0x74188 | 0x73588 | 0x220 |
CreateThread | - | 0x14005b218 | 0x74190 | 0x73590 | 0xf4 |
ExitThread | - | 0x14005b220 | 0x74198 | 0x73598 | 0x167 |
SetProcessShutdownParameters | - | 0x14005b228 | 0x741a0 | 0x735a0 | 0x554 |
GetSystemInfo | - | 0x14005b230 | 0x741a8 | 0x735a8 | 0x2ec |
FreeLibrary | - | 0x14005b238 | 0x741b0 | 0x735b0 | 0x1b3 |
lstrcmpiW | - | 0x14005b240 | 0x741b8 | 0x735b8 | 0x648 |
lstrcatW | - | 0x14005b248 | 0x741c0 | 0x735c0 | 0x642 |
MoveFileExW | - | 0x14005b250 | 0x741c8 | 0x735c8 | 0x3ee |
WideCharToMultiByte | - | 0x14005b258 | 0x741d0 | 0x735d0 | 0x60f |
MoveFileW | - | 0x14005b260 | 0x741d8 | 0x735d8 | 0x3f1 |
DeleteCriticalSection | - | 0x14005b268 | 0x741e0 | 0x735e0 | 0x113 |
InitializeCriticalSectionAndSpinCount | - | 0x14005b270 | 0x741e8 | 0x735e8 | 0x36a |
SetEvent | - | 0x14005b278 | 0x741f0 | 0x735f0 | 0x525 |
ResetEvent | - | 0x14005b280 | 0x741f8 | 0x735f8 | 0x4cb |
WaitForSingleObjectEx | - | 0x14005b288 | 0x74200 | 0x73600 | 0x5e9 |
CreateEventW | - | 0x14005b290 | 0x74208 | 0x73608 | 0xc1 |
GetModuleHandleW | - | 0x14005b298 | 0x74210 | 0x73610 | 0x280 |
RtlCaptureContext | - | 0x14005b2a0 | 0x74218 | 0x73618 | 0x4d4 |
RtlLookupFunctionEntry | - | 0x14005b2a8 | 0x74220 | 0x73620 | 0x4db |
RtlVirtualUnwind | - | 0x14005b2b0 | 0x74228 | 0x73628 | 0x4e2 |
UnhandledExceptionFilter | - | 0x14005b2b8 | 0x74230 | 0x73630 | 0x5be |
SetUnhandledExceptionFilter | - | 0x14005b2c0 | 0x74238 | 0x73638 | 0x57d |
IsProcessorFeaturePresent | - | 0x14005b2c8 | 0x74240 | 0x73640 | 0x38b |
IsDebuggerPresent | - | 0x14005b2d0 | 0x74248 | 0x73648 | 0x384 |
GetStartupInfoW | - | 0x14005b2d8 | 0x74250 | 0x73650 | 0x2d9 |
QueryPerformanceCounter | - | 0x14005b2e0 | 0x74258 | 0x73658 | 0x451 |
GetSystemTimeAsFileTime | - | 0x14005b2e8 | 0x74260 | 0x73660 | 0x2f2 |
InitializeSListHead | - | 0x14005b2f0 | 0x74268 | 0x73668 | 0x36e |
FormatMessageA | - | 0x14005b2f8 | 0x74270 | 0x73670 | 0x1ae |
GetStringTypeW | - | 0x14005b300 | 0x74278 | 0x73678 | 0x2e0 |
LocalFree | - | 0x14005b308 | 0x74280 | 0x73680 | 0x3d5 |
EncodePointer | - | 0x14005b310 | 0x74288 | 0x73688 | 0x133 |
DecodePointer | - | 0x14005b318 | 0x74290 | 0x73690 | 0x10c |
SetLastError | - | 0x14005b320 | 0x74298 | 0x73698 | 0x540 |
TlsAlloc | - | 0x14005b328 | 0x742a0 | 0x736a0 | 0x5ae |
TlsGetValue | - | 0x14005b330 | 0x742a8 | 0x736a8 | 0x5b0 |
TlsSetValue | - | 0x14005b338 | 0x742b0 | 0x736b0 | 0x5b1 |
TlsFree | - | 0x14005b340 | 0x742b8 | 0x736b8 | 0x5af |
CompareStringW | - | 0x14005b348 | 0x742c0 | 0x736c0 | 0x9d |
LCMapStringW | - | 0x14005b350 | 0x742c8 | 0x736c8 | 0x3b7 |
GetLocaleInfoW | - | 0x14005b358 | 0x742d0 | 0x736d0 | 0x26d |
GetCPInfo | - | 0x14005b360 | 0x742d8 | 0x736d8 | 0x1c9 |
SetEndOfFile | - | 0x14005b368 | 0x742e0 | 0x736e0 | 0x51f |
RtlPcToFileHeader | - | 0x14005b370 | 0x742e8 | 0x736e8 | 0x4dd |
RaiseException | - | 0x14005b378 | 0x742f0 | 0x736f0 | 0x467 |
RtlUnwindEx | - | 0x14005b380 | 0x742f8 | 0x736f8 | 0x4e1 |
LoadLibraryExW | - | 0x14005b388 | 0x74300 | 0x73700 | 0x3c9 |
GetTimeZoneInformation | - | 0x14005b390 | 0x74308 | 0x73708 | 0x317 |
GetCommandLineA | - | 0x14005b398 | 0x74310 | 0x73710 | 0x1de |
GetCommandLineW | - | 0x14005b3a0 | 0x74318 | 0x73718 | 0x1df |
DeleteFileW | - | 0x14005b3a8 | 0x74320 | 0x73720 | 0x118 |
GetFileType | - | 0x14005b3b0 | 0x74328 | 0x73728 | 0x257 |
GetConsoleOutputCP | - | 0x14005b3b8 | 0x74330 | 0x73730 | 0x208 |
GetConsoleMode | - | 0x14005b3c0 | 0x74338 | 0x73738 | 0x204 |
ExitProcess | - | 0x14005b3c8 | 0x74340 | 0x73740 | 0x166 |
GetModuleHandleExW | - | 0x14005b3d0 | 0x74348 | 0x73748 | 0x27f |
GetModuleFileNameW | - | 0x14005b3d8 | 0x74350 | 0x73750 | 0x27c |
GetStdHandle | - | 0x14005b3e0 | 0x74358 | 0x73758 | 0x2db |
IsValidLocale | - | 0x14005b3e8 | 0x74360 | 0x73760 | 0x393 |
GetUserDefaultLCID | - | 0x14005b3f0 | 0x74368 | 0x73768 | 0x31d |
EnumSystemLocalesW | - | 0x14005b3f8 | 0x74370 | 0x73770 | 0x15b |
SetStdHandle | - | 0x14005b400 | 0x74378 | 0x73778 | 0x559 |
Memory Dumps (2)
»
Name | Process ID | Start VA | End VA | Dump Reason | PE Rebuild | Bitness | Entry Point | YARA | Actions |
---|---|---|---|---|---|---|---|---|---|
9f3c1668ee44bfcd1afd599215f5bd73c76609776b78cb04bb6ef1121cc80d37.exe | 1 | 0x13FB20000 | 0x13FB9FFFF | Relevant Image |
![]() |
64-bit | 0x13FB54F48 |
![]() |
...
|
9f3c1668ee44bfcd1afd599215f5bd73c76609776b78cb04bb6ef1121cc80d37.exe | 1 | 0x13FB20000 | 0x13FB9FFFF | Process Termination |
![]() |
64-bit | - |
![]() |
...
|
\\?\C:\RUSSKIJ VOENNIJ KORABL IDI NAHUJ.html | Dropped File | HTML |
suspicious
|
...
|
»
Extracted URLs (5)
»
URL | WHOIS Data | Reputation Status | Recursively Submitted | Actions |
---|---|---|---|---|
https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css |
Show WHOIS
|
N/A
|
- |
...
|
https://www.youtube.com/embed/scLoZQRi4eE |
Show WHOIS
|
N/A
|
- |
...
|
https://player.vimeo.com/video/682484326?h=6a561cb963 |
Show WHOIS
|
N/A
|
- |
...
|
https://player.vimeo.com/video/682485106?h=1f808323cd |
Show WHOIS
|
N/A
|
- |
...
|
https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js |
Show WHOIS
|
N/A
|
- |
...
|
\\?\C:\Users\kEecfMwgj\Documents\sa_8j67VQfB.docx.putinwillburninhell | Modified File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\7GcWlVD3RO7Z2gU_i\t6j6DUqF4Y_XA1xoM8n.rtf.putinwillburninhell | Modified File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\ciValSlNPsW\8hm73Dl.ots.putinwillburninhell | Modified File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\bpC4_D5mOGSD8\-I3jp6x1.pptx.putinwillburninhell | Modified File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Favorites\Microsoft Websites\Microsoft Store.url.putinwillburninhell | Modified File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Favorites\Microsoft Websites\Microsoft At Work.url.putinwillburninhell | Modified File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\CteJsHUo94JJ_.wav.putinwillburninhell | Modified File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\wrbpf_GiXikE.wav.putinwillburninhell | Modified File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\2FACOKa\Uh8wEc.png.putinwillburninhell | Modified File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\2FACOKa\fyunM.png.putinwillburninhell | Modified File | Stream |
clean
|
...
|
»
c:\wkssvc | Dropped File | Unknown |
clean
|
...
|
»
\\?\C:\Recovery\d327d5c2-7147-11eb-9862-d731c5aaa7a9\boot.sdi.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Recovery\d327d5c2-7147-11eb-9862-d731c5aaa7a9\Winre.wim.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\NTUSER.DAT.LOG1.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\NTUSER.DAT.LOG2.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\Contacts\Administrator.contact.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\Favorites\Links\Web Slice Gallery.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\Favorites\Microsoft Websites\IE Add-on site.url.putinwillburninhell | Dropped File | Binary |
clean
|
...
|
»
\\?\C:\Users\Default\Favorites\Microsoft Websites\IE site on Microsoft.com.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Home.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\Favorites\Microsoft Websites\Microsoft Store.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Work.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\Favorites\MSN Websites\MSN Autos.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\Favorites\MSN Websites\MSN Entertainment.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\Favorites\Windows Live\Get Windows Live.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\Favorites\MSN Websites\MSN Money.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\Favorites\Windows Live\Windows Live Gallery.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\Favorites\Windows Live\Windows Live Mail.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\Favorites\MSN Websites\MSN Sports.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\Favorites\MSN Websites\MSN.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\Favorites\Windows Live\Windows Live Spaces.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\Favorites\MSN Websites\MSNBC News.url.putinwillburninhell | Dropped File | Binary |
clean
|
...
|
»
\\?\C:\Users\Default\Searches\Everywhere.search-ms.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Default\Searches\Indexed Locations.search-ms.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Contacts\Administrator.contact.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\79yvxzEnvc0Af7Hrw.rtf.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\7gV6rqdG8I04g.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\7hOwQ.docx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\z3d6mmz\3fKngjzc1J_Udk.pdf.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\z3d6mmz\6Kwey3fB27Z.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\z3d6mmz\elPdl_6jPOmISlqIBP6.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\hAd9Q6GsBzGAbe2ze3H.ods.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\z3d6mmz\f2Si1TSIYr.avi.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\1U7obgwKIjSfDZD9BY.docx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\z3d6mmz\gALwpfGgzf.avi.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\z3d6mmz\jF_EENSJ6epHV.rtf.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\obcsF yewBm_f7MUM.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\olaHS17GFwO_C.swf.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\oUzQLoD_.odp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\QeSIf.mkv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\qUBAo1g6.png.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\vdzMmU5_F.png.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\W5d2aA7Ek3jRGZaEK.bmp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\W_CEuKGTJzFN0pvd.mkv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\z3d6mmz\UW1fHyn07-bkjTmDB.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\ZuEnVLdij-rNVv.odp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\_B17tXVoUpmxXcymBkp.mkv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\z3d6mmz\t_J1D_9_YHUQD.csv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\ZqZcay0.bmp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\Lgy0tHD3McUAdC.pps.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\KNdbhPNRqx_qGV4lyEZ.bmp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\JIjKksYpUy.pptx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\IACZs95LNh28X3Uf4HV.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\HTt0GZ2pitKr5bENe.gif.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\hPGayxPVvNv70cVNwFY.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\el9A.docx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\aBqzkte3MaYBXolmknW.docx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\a7j7A2Jj.xlsx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\fMBwGtYfnpVE.odp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Fwp8wl8r-WgJ.pptx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\H2Rao2MJ18RO.ppt.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\9ygKvXXI6ogBWbXK.ppt.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\fD wWXIrl-7.pptx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\E5 BV.xlsx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\zsmz.png.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\dOWm-lSQ.xlsx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\kFtkSzqhZl.xls.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\XRV1 9y-zJ86j.pps.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\v28W95lb.docx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\oBDRqmND1.ppt.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\us5luVc6iN.pptx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\qopw IdAsQg6F.xlsx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Ox6 -Mbaf A.pptx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\CvjPA_EUuVetfGZ8jy.xlsx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\6u7vuU.pptx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\a4kTtC7UrCXMRHs9\1OeEAtHmUkYfiex.mkv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\a4kTtC7UrCXMRHs9\UMOIpDehD2AZUlsCiSi_.csv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\-1c1XhNIisB.xlsx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\z3d6mmz\X 04_VraTX.odt.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\aADtFphea4CsMU.odp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\a4kTtC7UrCXMRHs9\7bci-mRx4Pny1.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\a4kTtC7UrCXMRHs9\LXUG.wav.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\a4kTtC7UrCXMRHs9\VrGUPaLlAb9N9eYZkT.swf.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\xsF_a nOx7.pdf.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\nncwQKS.odp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\7GcWlVD3RO7Z2gU_i\ddjMF6cHE n.xlsx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\f3hAOpO-JqYChxRRmH.doc.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Desktop\a4kTtC7UrCXMRHs9\Dnx6.swf.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\ciValSlNPsW\lQH0ipY0I.csv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\ciValSlNPsW\NtKFS49A6Nz.ots.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\7GcWlVD3RO7Z2gU_i\hcdnWO6ZWIe6lxl.csv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\7GcWlVD3RO7Z2gU_i\LxgYRfs9Jed3f_xpVqB.doc.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\bpC4_D5mOGSD8\-yJHXceVDLZYUVgCY.xlsx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\7GcWlVD3RO7Z2gU_i\nT74Qiu5FLMFmYlexEb.pptx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\bpC4_D5mOGSD8\Jyr46Y6mpgXdp26.csv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\bpC4_D5mOGSD8\S p00-gwT.odp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Outlook Files\franc@gdllo.de.pst.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\bpC4_D5mOGSD8\wWlnQOEQlE7AeiqVY4c.pdf.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\qRNGKtIjG9a\7eZ-_NQH- QmF2.pptx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\ciValSlNPsW\oNHZzz4ILkW.csv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\qRNGKtIjG9a\GJ5mcEPDsblXNSVSE5.doc.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\qRNGKtIjG9a\weJz4veWdlBt.odp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\qRNGKtIjG9a\KrBa3wM r.odp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\qRNGKtIjG9a\gqjL.xlsx.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Documents\Avihei6slRdqjWBx\KtzYXBNqM8_bbe0\b5whH3JZUS7_z.xls.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Favorites\Links\Web Slice Gallery.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Favorites\Microsoft Websites\IE Add-on site.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Favorites\Microsoft Websites\IE site on Microsoft.com.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Favorites\MSN Websites\MSN Autos.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Favorites\MSN Websites\MSN Entertainment.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Favorites\Microsoft Websites\Microsoft At Home.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Favorites\MSN Websites\MSN Sports.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Favorites\Windows Live\Get Windows Live.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Favorites\MSN Websites\MSN.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Favorites\MSN Websites\MSNBC News.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Favorites\Windows Live\Windows Live Mail.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Favorites\Windows Live\Windows Live Spaces.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Favorites\MSN Websites\MSN Money.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Favorites\Windows Live\Windows Live Gallery.url.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\-SllN1FYA89x.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\1pvhYVt-qeBF4A 8.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\3oAvP2zLZGow.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\0u4O3oyJ-836bw.wav.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\50uEB5-pi8RwIrOySb.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\AQeQMpxawY0CXdJ HM.wav.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\cFnPQ5e_v1.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\b zsp_pO4R.wav.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\obI2Cx1ZzJmNbUSv960.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\MJdlcP0NLPVokn.wav.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\hX9bugNvkmsscuDAZ.wav.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\hV61jRbkiz-5Yrg.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\gkn4THoM0gnRK.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\DdADroNR8F.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\cFtFWO08h6.wav.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\ipEp.wav.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\lQiksUqnfA-lwBaw_QBv.wav.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\rdf9KGu2d2orNGjG.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2_x6Abk3t.gif.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\5BHanLeotB0 aS.bmp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\BtzSpQV.png.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\wPAkMLKh48vE5u.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\xa0Vjd PbrZUzC.bmp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\79vVwb2WXYd.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\ozmYD8_J3-xTLUqHhV9.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\_F ff1rllBAgl.wav.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\sUFCy.wav.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Music\vtc2WZrMPS3j_.m4a.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\U5mtcDb6C066rGCa0.gif.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\-AtvAo4NI-0I_W\5UKJRIlaLvU4.png.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\2FACOKa\m64CrwawN9nlfjFYU\_n02kx\56s5G7x5Vn.bmp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\2FACOKa\6Rypw.bmp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\2FACOKa\m64CrwawN9nlfjFYU\_n02kx\vcq1KMMSLVEeP.png.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\2FACOKa\m64CrwawN9nlfjFYU\_n02kx\QwJAAw YpE6AYOeC-Pa.bmp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\2FACOKa\m64CrwawN9nlfjFYU\_n02kx\Ib0q.gif.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\2FACOKa\m64CrwawN9nlfjFYU\_n02kx\iaDzkwBBsl6mqKtKvQ.gif.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\2FACOKa\FgrbxG.png.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\2FACOKa\8xPSujbbxrjIcS.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\2FACOKa\m64CrwawN9nlfjFYU\_n02kx\eSelkK51PZi\8iuonVmpoU.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\2FACOKa\m64CrwawN9nlfjFYU\_n02kx\bt3Cg0\5xtPu_ a_VjniaoY.bmp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\2FACOKa\m64CrwawN9nlfjFYU\_n02kx\bt3Cg0\f0DonBa.bmp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\2FACOKa\m64CrwawN9nlfjFYU\_n02kx\eSelkK51PZi\oKrY-gndx9n50R\b5amB41CZP.gif.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\2FACOKa\m64CrwawN9nlfjFYU\_n02kx\eSelkK51PZi\AMWVLL.png.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\2FACOKa\m64CrwawN9nlfjFYU\_n02kx\eSelkK51PZi\lTdxD.gif.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\cuYEwfNGsRqS\5dCP-x022J3liNX.bmp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\rviZhd5fS\9pqkTx3DER4kb xLMtt.bmp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\rviZhd5fS\bo5tKnMz.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\rviZhd5fS\gXMgDPp.bmp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\rviZhd5fS\JIE4DFxpNgZTNK2BfE.bmp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\rviZhd5fS\LWqOiapoN22W.png.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\rviZhd5fS\oqKDMiM2GC2qSrOEu7I.gif.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\rviZhd5fS\QCv4ik.bmp.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\rviZhd5fS\xhRhpbErU.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\2FACOKa\m64CrwawN9nlfjFYU\_n02kx\eSelkK51PZi\oKrY-gndx9n50R\wignYEXECPW7nAFgGTTZ.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\cuYEwfNGsRqS\6OKGKIA-5nVKQ.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\cuYEwfNGsRqS\kbr3yDSBOO HcSPPlc.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\cuYEwfNGsRqS\oCPza.gif.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Searches\Everywhere.search-ms.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Searches\Indexed Locations.search-ms.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Pictures\2SjwVX2z\cuYEwfNGsRqS\Z3ZZl2.gif.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\4EbkRz9e h_f2\eVl 0 T.mkv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\BLis2Kgp 70b.mkv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\4EbkRz9e h_f2\KdAZbsxUP2AJ.swf.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\GhzcIdeES8OUYdtZ.avi.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\4EbkRz9e h_f2\arERiaX82Me\6pZCLwR1w-n-qp5JNY.swf.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\4EbkRz9e h_f2\YvLm.swf.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\m6wN_UBj806tS0 E.swf.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\4EbkRz9e h_f2\kXhWX\DMvy6OU49i\oOqHI7qS\3i-d7.swf.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\4EbkRz9e h_f2\kXhWX\5KmF2.flv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\4EbkRz9e h_f2\kXhWX\DMvy6OU49i\E8t_wrca8FAcD0q.flv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\4EbkRz9e h_f2\kXhWX\DMvy6OU49i\_sfI5zw1uMq8R90hT_\6-Ql3FIpMYPL41BK1W.swf.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\4EbkRz9e h_f2\kXhWX\PBhht41hrp--IvRaxtK\0mhiA.swf.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\4EbkRz9e h_f2\kXhWX\DMvy6OU49i\malNc.flv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\4EbkRz9e h_f2\kXhWX\DMvy6OU49i\_sfI5zw1uMq8R90hT_\Ap4 o 7oB2dPZmq.avi.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\4EbkRz9e h_f2\kXhWX\PBhht41hrp--IvRaxtK\anIQLlA3GC3BgRrVhAJF.avi.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\4EbkRz9e h_f2\kXhWX\DMvy6OU49i\VA021N1LbKapR16D.flv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\4EbkRz9e h_f2\kXhWX\PBhht41hrp--IvRaxtK\bS2LzmBpAsb-ud30 p.flv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\4EbkRz9e h_f2\kXhWX\DMvy6OU49i\_sfI5zw1uMq8R90hT_\MpV knWA7G.swf.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\4EbkRz9e h_f2\kXhWX\PBhht41hrp--IvRaxtK\k2zXBtebV4.mkv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\kEecfMwgj\Videos\4EbkRz9e h_f2\kXhWX\DMvy6OU49i\_sfI5zw1uMq8R90hT_\QZWz2.mkv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Public\Libraries\RecordedTV.library-ms.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Public\Pictures\Sample Pictures\Desert.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Public\Videos\Sample Videos\Wildlife.wmv.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Public\Pictures\Sample Pictures\Koala.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»
\\?\C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg.putinwillburninhell | Dropped File | Stream |
clean
|
...
|
»