Ransomware Spyware Wiper
Mal/Generic-S
Created on 2022-03-18T08:23:00
b40db2ff2f7b61092ec9962bfefe8eca240d3a4238e9e96ebe48e840dcdc5965.exe
Remarks (1/1)
(0x0200000E): The overall sleep time of all monitored processes was truncated from "14 hours, 55 minutes, 42 seconds" to "25 seconds" to reveal dormant functionality.
Remarks
(0x0200001E): The maximum size of extracted files was exceeded. Some files may be missing in the report.
(0x0200004A): 4 dumps were skipped because they exceeded the maximum dump size of 7 MB. The largest one was 770 MB.
(0x0200001B): The maximum number of file Reputation Analysis requests per analysis (150) was exceeded.
This list contains only the embedded files, downloaded files, and dropped files
Filters: |
There are no files for this filter
There are no files in this analysis
File Name | Category | Type | Verdict | Actions |
---|
C:\Users\RDhJ0CNFevzX\Desktop\b40db2ff2f7b61092ec9962bfefe8eca240d3a4238e9e96ebe48e840dcdc5965.exe | Sample File | Binary |
malicious
|
...
|
Verdict |
malicious
|
Names | Mal/Generic-S |
Image Base | 0x400000 |
Entry Point | 0x44ba80 |
Size Of Code | 0x1dba00 |
Size Of Initialized Data | 0x16c00 |
File Type | FileType.executable |
Subsystem | Subsystem.windows_cui |
Machine Type | MachineType.i386 |
Compile Timestamp | 1970-01-01 00:00:00+00:00 |
Name | Virtual Address | Virtual Size | Raw Data Size | Raw Data Offset | Flags | Entropy |
---|---|---|---|---|---|---|
.text | 0x401000 | 0x1db814 | 0x1dba00 | 0x400 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ | 6.16 |
.data | 0x5dd000 | 0x2ae48 | 0x16c00 | 0x1dbe00 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 5.53 |
/4 | 0x608000 | 0x1b5 | 0x200 | 0x1f2a00 | IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ | 4.24 |
/18 | 0x609000 | 0x1f46c | 0x1f600 | 0x1f2c00 | IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ | 6.59 |
/30 | 0x629000 | 0x194b0 | 0x19600 | 0x212200 | IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ | 4.37 |
/43 | 0x643000 | 0xe2db | 0xe400 | 0x22b800 | IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ | 5.4 |
/59 | 0x652000 | 0x11ccd | 0x11e00 | 0x239c00 | IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ | 5.43 |
/75 | 0x664000 | 0x2d | 0x200 | 0x24ba00 | IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ | 0.79 |
/94 | 0x665000 | 0x95c78 | 0x95e00 | 0x24bc00 | IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ | 5.95 |
/106 | 0x6fb000 | 0x6d90 | 0x6e00 | 0x2e1a00 | IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ | 3.9 |
.idata | 0x702000 | 0x372 | 0x400 | 0x2e8800 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 4.32 |
.symtab | 0x703000 | 0x36339 | 0x36400 | 0x2e8c00 | IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ | 5.29 |
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
timeEndPeriod | - | 0x5dd000 | 0x3022e6 | 0x2e8ae6 | 0x0 |
timeBeginPeriod | - | 0x5dd004 | 0x3022ea | 0x2e8aea | 0x0 |
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
WSAGetOverlappedResult | - | 0x5dd00c | 0x3022f2 | 0x2e8af2 | 0x0 |
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
WriteFile | - | 0x5dd014 | 0x3022fa | 0x2e8afa | 0x0 |
WriteConsoleW | - | 0x5dd018 | 0x3022fe | 0x2e8afe | 0x0 |
WaitForSingleObject | - | 0x5dd01c | 0x302302 | 0x2e8b02 | 0x0 |
VirtualFree | - | 0x5dd020 | 0x302306 | 0x2e8b06 | 0x0 |
VirtualAlloc | - | 0x5dd024 | 0x30230a | 0x2e8b0a | 0x0 |
SwitchToThread | - | 0x5dd028 | 0x30230e | 0x2e8b0e | 0x0 |
SetWaitableTimer | - | 0x5dd02c | 0x302312 | 0x2e8b12 | 0x0 |
SetUnhandledExceptionFilter | - | 0x5dd030 | 0x302316 | 0x2e8b16 | 0x0 |
SetProcessPriorityBoost | - | 0x5dd034 | 0x30231a | 0x2e8b1a | 0x0 |
SetEvent | - | 0x5dd038 | 0x30231e | 0x2e8b1e | 0x0 |
SetErrorMode | - | 0x5dd03c | 0x302322 | 0x2e8b22 | 0x0 |
SetConsoleCtrlHandler | - | 0x5dd040 | 0x302326 | 0x2e8b26 | 0x0 |
LoadLibraryA | - | 0x5dd044 | 0x30232a | 0x2e8b2a | 0x0 |
LoadLibraryW | - | 0x5dd048 | 0x30232e | 0x2e8b2e | 0x0 |
GetSystemInfo | - | 0x5dd04c | 0x302332 | 0x2e8b32 | 0x0 |
GetStdHandle | - | 0x5dd050 | 0x302336 | 0x2e8b36 | 0x0 |
GetQueuedCompletionStatus | - | 0x5dd054 | 0x30233a | 0x2e8b3a | 0x0 |
GetProcessAffinityMask | - | 0x5dd058 | 0x30233e | 0x2e8b3e | 0x0 |
GetProcAddress | - | 0x5dd05c | 0x302342 | 0x2e8b42 | 0x0 |
GetEnvironmentStringsW | - | 0x5dd060 | 0x302346 | 0x2e8b46 | 0x0 |
GetConsoleMode | - | 0x5dd064 | 0x30234a | 0x2e8b4a | 0x0 |
FreeEnvironmentStringsW | - | 0x5dd068 | 0x30234e | 0x2e8b4e | 0x0 |
ExitProcess | - | 0x5dd06c | 0x302352 | 0x2e8b52 | 0x0 |
DuplicateHandle | - | 0x5dd070 | 0x302356 | 0x2e8b56 | 0x0 |
CreateThread | - | 0x5dd074 | 0x30235a | 0x2e8b5a | 0x0 |
CreateIoCompletionPort | - | 0x5dd078 | 0x30235e | 0x2e8b5e | 0x0 |
CreateEventA | - | 0x5dd07c | 0x302362 | 0x2e8b62 | 0x0 |
CloseHandle | - | 0x5dd080 | 0x302366 | 0x2e8b66 | 0x0 |
AddVectoredExceptionHandler | - | 0x5dd084 | 0x30236a | 0x2e8b6a | 0x0 |
Name | Process ID | Start VA | End VA | Dump Reason | PE Rebuild | Bitness | Entry Point | YARA | Actions |
---|---|---|---|---|---|---|---|---|---|
b40db2ff2f7b61092ec9962bfefe8eca240d3a4238e9e96ebe48e840dcdc5965.exe | 1 | 0x00400000 | 0x00739FFF | Relevant Image |
![]() |
32-bit | 0x00436F20 |
![]() |
...
|
b40db2ff2f7b61092ec9962bfefe8eca240d3a4238e9e96ebe48e840dcdc5965.exe | 1 | 0x00400000 | 0x00739FFF | Final Dump |
![]() |
32-bit | - |
![]() |
...
|
C:\Users\RDhJ0CNFevzX\Desktop\1svsBULw6E2suU5FLV.gif | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\1svsBULw6E2suU5FLV.gif.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\6ag5kfsiaVq.mp4 | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\6ag5kfsiaVq.mp4.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\9dmrU1YjBAS.xlsx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\9dmrU1YjBAS.xlsx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\A7lg gNk.mkv | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\A7lg gNk.mkv.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\C0syXD_bv.odt | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\C0syXD_bv.odt.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\DiFuL.swf | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\DiFuL.swf.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\Dyb9xZeWpRv.swf | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\Dyb9xZeWpRv.swf.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\L1OM5.png | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\L1OM5.png.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\LcNUIHK9IEvgMQ7.jpg | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\LcNUIHK9IEvgMQ7.jpg.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\Lvtr1Ydb7MIz.mkv | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\Lvtr1Ydb7MIz.mkv.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\MJtStno\0RzD7W9keho8x2.gif | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\MJtStno\0RzD7W9keho8x2.gif.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\MJtStno\UQjVL.png | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\MJtStno\UQjVL.png.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\QixwzNlhzqpngSpTJiG.avi | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\QixwzNlhzqpngSpTJiG.avi.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\R3 MdJzJmTt.ods | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\R3 MdJzJmTt.ods.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\S-eoW0hMerDLmPid.mp4 | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\S-eoW0hMerDLmPid.mp4.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\SFjU-GGjjEg.wav | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\SFjU-GGjjEg.wav.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\SJsz9b80pOXI.wav | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\SJsz9b80pOXI.wav.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\Sp32K2MJT8oGwSN.gif | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\Sp32K2MJT8oGwSN.gif.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\WYG6ic.jpg | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\WYG6ic.jpg.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\YUi--Xwk3SNHRau.bmp | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\YUi--Xwk3SNHRau.bmp.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\ZKt7SKs8.mp4 | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\ZKt7SKs8.mp4.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\aOaBV.bmp | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\aOaBV.bmp.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\bYMSr1.mkv | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\bYMSr1.mkv.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\cDIqglnt.pps | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\cDIqglnt.pps.locked | Dropped File | Binary |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\joFK1K4FpCy.odt | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\joFK1K4FpCy.odt.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\jqRKACl6\27JfCEVulMHbbO.mp3 | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\jqRKACl6\27JfCEVulMHbbO.mp3.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\jqRKACl6\9Vntf.mkv | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\jqRKACl6\9Vntf.mkv.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\jqRKACl6\kfCcoa0Kn4e.mp3 | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\jqRKACl6\kfCcoa0Kn4e.mp3.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\jqRKACl6\lkG90.jpg | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\jqRKACl6\lkG90.jpg.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\jqRKACl6\w8O0bav5Ww_S.pdf | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\jqRKACl6\w8O0bav5Ww_S.pdf.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\l2CI\D-Cg-mvfsgn.flv | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\l2CI\D-Cg-mvfsgn.flv.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\l2CI\KBe56raX.jpg | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\l2CI\KBe56raX.jpg.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\l2CI\UyGAh1goU67sQ4n_bFy.mp3 | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\l2CI\UyGAh1goU67sQ4n_bFy.mp3.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\l2CI\pmRHoZn51.avi | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\l2CI\pmRHoZn51.avi.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\pgIQZ6vV6.mkv | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\pgIQZ6vV6.mkv.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\uFbh\4m1VwisQwNYyO.mp3 | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\uFbh\4m1VwisQwNYyO.mp3.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\uFbh\q0drlHYf6Q54DMKd0A\3_vtHE.pptx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\uFbh\q0drlHYf6Q54DMKd0A\3_vtHE.pptx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\uFbh\q0drlHYf6Q54DMKd0A\664ei1-x8f0_Yk6d9oEE.png | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\uFbh\q0drlHYf6Q54DMKd0A\664ei1-x8f0_Yk6d9oEE.png.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\uFbh\q0drlHYf6Q54DMKd0A\zeUh4bIJhKCdE8.swf | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Desktop\uFbh\q0drlHYf6Q54DMKd0A\zeUh4bIJhKCdE8.swf.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\2kmOhs9S25.xlsx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\2kmOhs9S25.xlsx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\5pf90.rtf | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\5pf90.rtf.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\6gmL5X_4slK-0_B6U.xlsx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\6gmL5X_4slK-0_B6U.xlsx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\7GBj_BHQB3gjCk60.docx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\7GBj_BHQB3gjCk60.docx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\8Y_umCxlI.xlsx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\8Y_umCxlI.xlsx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\GAL0vICrqtbz5.ots | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\GAL0vICrqtbz5.ots.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\Nv-fQq_ b.pptx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\Nv-fQq_ b.pptx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\Outlook Files\achoo@gdllo.de.pst | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\Outlook Files\achoo@gdllo.de.pst.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\SfN_7SLvBv6HWGGZ.docx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\SfN_7SLvBv6HWGGZ.docx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\TaxhME.pptx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\TaxhME.pptx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\XlenjhZeamfDvL.odt | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\XlenjhZeamfDvL.odt.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\YKkR7 10Jqcina5HGOD.pptx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\YKkR7 10Jqcina5HGOD.pptx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\Zx_PeYMMp5W-Vj0.xlsx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\Zx_PeYMMp5W-Vj0.xlsx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\eBPMR.pptx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\eBPMR.pptx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\eau-Oo1pPUvz4w8PX.ppt | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\eau-Oo1pPUvz4w8PX.ppt.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\gRpk8Z1c.docx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\gRpk8Z1c.docx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\jaCxkmZM5HvA.docx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\jaCxkmZM5HvA.docx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\6ah1b.odp | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\6ah1b.odp.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\uMlP.pps | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\uMlP.pps.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\3Zq4EcajslY7PFQKVsvW.pdf | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\3Zq4EcajslY7PFQKVsvW.pdf.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\9RRM_.csv | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\9RRM_.csv.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\H9ZYmL.pptx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\H9ZYmL.pptx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\-iqW_.pptx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\-iqW_.pptx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\5A5KELPEB3fxvrO\Q8qlBA 30gG.ods | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\5A5KELPEB3fxvrO\Q8qlBA 30gG.ods.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\5A5KELPEB3fxvrO\VNJUeKMIKE5Ysn n.rtf | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\5A5KELPEB3fxvrO\VNJUeKMIKE5Ysn n.rtf.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\5A5KELPEB3fxvrO\xgy7j.pptx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\5A5KELPEB3fxvrO\xgy7j.pptx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\5A5KELPEB3fxvrO\zIPqwuKy.rtf | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\5A5KELPEB3fxvrO\zIPqwuKy.rtf.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\LtbtPfDoTJ77Qjxw.odt | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\LtbtPfDoTJ77Qjxw.odt.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\Mh6oNy9bLKM5.pps | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\Mh6oNy9bLKM5.pps.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\ZjvJmA1w8wm09o.odt | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\ZjvJmA1w8wm09o.odt.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\bPP6k2AtPCvK.odp | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\IQnC\bPP6k2AtPCvK.odp.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\LdD7S xtG\8BmBuzkrBAz-1J-IShq.pdf | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\LdD7S xtG\8BmBuzkrBAz-1J-IShq.pdf.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\LdD7S xtG\R1iyoik0t.ppt | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\LdD7S xtG\R1iyoik0t.ppt.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\LdD7S xtG\fAbqQJxC6j.xls | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\LdD7S xtG\fAbqQJxC6j.xls.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\LdD7S xtG\qb50fmMABVOmckG.docx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\LdD7S xtG\qb50fmMABVOmckG.docx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\LdD7S xtG\r455COtDTUz9Fdj.docx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\LdD7S xtG\r455COtDTUz9Fdj.docx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\LdD7S xtG\sTfdrvnNNB6old.doc | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\LdD7S xtG\sTfdrvnNNB6old.doc.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\ZRQK8ITXpYCj4zTc6UpV.rtf | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\ZRQK8ITXpYCj4zTc6UpV.rtf.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\cRamxOp.pptx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\vJv2RbfkMNDaXqowjBc\TVGDzH\cRamxOp.pptx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\xtaQYYC_Me3cfvNcxyDr.doc | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\l0xtaApata393X0pssf\xtaQYYC_Me3cfvNcxyDr.doc.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\lqYFgux47JTvr.xlsx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\lqYFgux47JTvr.xlsx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\nZtB-SvOqljCAptbv.pptx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\nZtB-SvOqljCAptbv.pptx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\pPFUnzZFOF 9YXG.docx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\pPFUnzZFOF 9YXG.docx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\qp2itemHgewbk.docx | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Documents\qp2itemHgewbk.docx.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\7mWj_4UeifSg72HGe.mp3 | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\7mWj_4UeifSg72HGe.mp3.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\89UN7U8UcvWE0Pw.wav | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\89UN7U8UcvWE0Pw.wav.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\8FbWAE.wav | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\8FbWAE.wav.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\9DvsfF1.mp3 | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\9DvsfF1.mp3.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\B_jYrXtVn5ucpHO.mp3 | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\B_jYrXtVn5ucpHO.mp3.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\Dh5LUhj8FtJW.wav | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\Dh5LUhj8FtJW.wav.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\OVNI4VExbL.mp3 | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\OVNI4VExbL.mp3.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\UmQfaBsq6MRToyGP3nkw.wav | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\UmQfaBsq6MRToyGP3nkw.wav.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\WkJTMmRBO.mp3 | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\WkJTMmRBO.mp3.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\YFHDjYBjycFIwib.wav | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\YFHDjYBjycFIwib.wav.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\ZCNbC-F2.mp3 | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\ZCNbC-F2.mp3.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\f_6TYxtCvn.wav | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\f_6TYxtCvn.wav.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\iFgh6E2_tLRdo1ADper.wav | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\iFgh6E2_tLRdo1ADper.wav.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\irILvbX.mp3 | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\irILvbX.mp3.locked | Dropped File | Stream |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\oM719AbRwy.wav | Dropped File | Text |
clean
|
...
|
C:\Users\RDhJ0CNFevzX\Music\oM719AbRwy.wav.locked | Dropped File | Stream |
clean
|
...
|