Encrypted Doc Dropping GandCrab v3.0.1 | IOCs
Logo
Try VMRay Analyzer
VTI SCORE: 100/100
Target: win7_64_sp1-mso2016 | ms_office
Classification: Dropper, Trojan, Downloader, Ransomware

be54bb05adbda29316ba03d61b3365d8a03e1121a39ae492078787aff4f1248f (SHA256)

Faith's Resume.doc

Word Document

Created at 2018-06-04 08:51:00

...

Notifications (2/2)

Some extracted files may be missing in the report since the maximum number of extracted files was reached during the analysis. You can increase the limit in the configuration settings.

The operating system was rebooted during the analysis.

Indicators

File (1237)
»
Filename Hash Operations
C:\$Recycle.Bin\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\$Recycle.Bin\S-1-5-21-2345716840-1148442690-1481144037-1000\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\bootmgr - Access
C:\bootmgr.CRAB - Access
C:\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Read, Write
C:\Documents and Settings\\CRAB-DECRYPT.txt - Access, Write
C:\PerfLogs\Admin\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\PerfLogs\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Program Files (x86)\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Program Files\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Recovery\121b3f02-5db6-11e7-a78f-e0ac95e38a5b\boot.sdi - Access
C:\Recovery\121b3f02-5db6-11e7-a78f-e0ac95e38a5b\boot.sdi.CRAB MD5: 43cd44d565751c430fd8bc932963050e
SHA1: e4ccd06c35c9e92de786778c1cce15e21a6f8178
SHA256: a8c7571b9bb142ab0faeb23a8a81e7d22cfdc41a9016e026d04a96bacbba5d8a 		Access, Read, Write
C:\Recovery\121b3f02-5db6-11e7-a78f-e0ac95e38a5b\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Recovery\121b3f02-5db6-11e7-a78f-e0ac95e38a5b\Winre.wim - Access
C:\Recovery\121b3f02-5db6-11e7-a78f-e0ac95e38a5b\Winre.wim.CRAB MD5: 67c280d20da4fb2a80bb3b5f1d218cb3
SHA1: 875b197dddb429d4e813fdc3afe6b6ef7bd3bc5f
SHA256: fcd65205345ff257168043015f8e925981cf47812925fafce0adb90a7b25c43b 		Access, Read, Write
C:\Recovery\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\System Volume Information\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\System Volume Information\SPP\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\System Volume Information\SPP\OnlineMetadataCache\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{1464a7e2-b1f6-44f6-ab25-0a7a4bb4c5ec}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{1464a7e2-b1f6-44f6-ab25-0a7a4bb4c5ec}_OnDiskSnapshotProp.CRAB MD5: 92f3911d39d468977528af5501ff19ed
SHA1: 46fb5a44f9b6d85b55f2efbe893074adefcb3f07
SHA256: 24c4918bbbc8a8c70e0732e44b44eff6650303605be293443fa4ea5492f97eb4 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{17603fef-a99c-46eb-a49a-b5f7a388ac37}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{17603fef-a99c-46eb-a49a-b5f7a388ac37}_OnDiskSnapshotProp.CRAB MD5: 7d667522d3066243f12f9fe19d4b1bb1
SHA1: 291ac43919ab2b8abf042f272418ae2719723dbc
SHA256: 7a702baeb32f9f8014bc4490e38d1ed4e0874455031521d5c1d265b47dae31d3 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{1d99f231-08df-4547-9987-3ce24f9e555d}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{1d99f231-08df-4547-9987-3ce24f9e555d}_OnDiskSnapshotProp.CRAB MD5: f85bf7b30a11b07a7c0a8ea024ba0c64
SHA1: f21455721488d807e64e0905ced21f1cfe9f3098
SHA256: fc583b29f5bb999f163fb05c9a752cf69a5fa5390b1fa4ba1326ba0e7dafc02b 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{24501ced-d134-42f7-8d5e-7175ee970ba1}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{24501ced-d134-42f7-8d5e-7175ee970ba1}_OnDiskSnapshotProp.CRAB MD5: 33d7fe9ea1927d5943af79a530940b9d
SHA1: 4e745e8e8757ad984669269d8b4f3c5167400084
SHA256: cc23227d514e1ff26cda56a0862a9880107f997e551375134e47d15e7f7157ef 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{35181908-2f4d-4f92-b01d-72ac6330cc78}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{35181908-2f4d-4f92-b01d-72ac6330cc78}_OnDiskSnapshotProp.CRAB MD5: dda871dc221199a300b0e9c4ceb2b439
SHA1: 087f753465745a46c81828327108b4158ae6f606
SHA256: 9b22fc7cd0f73c7b6a63f736612285d95b8cbbd8d762a451762bc4fb586680fa 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{3dfb3fc9-afa8-469c-8a44-3e1ae00a9f90}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{3dfb3fc9-afa8-469c-8a44-3e1ae00a9f90}_OnDiskSnapshotProp.CRAB MD5: 5c4089e5ad5156ae9f20172c4a590c6e
SHA1: acd35edf74a3a42059a787da0b1f50dffcbe6545
SHA256: e006b76db1efb33dc076b64d192e672bde2b926459eedbb24e6b4a6c0f21cbd5 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{6de242b9-6bd1-4a34-9c7e-ae773241e8a6}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{6de242b9-6bd1-4a34-9c7e-ae773241e8a6}_OnDiskSnapshotProp.CRAB MD5: 8eeb7f80ad73189f6750b5326d363a47
SHA1: 67b2b29c518d59c0b381f0ce48601fd23223a027
SHA256: 4d72d86851000d72439752475b9c52a1e32084e2abf743d19fdd951315fc7f13 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{769c2e8d-f2e6-4a7c-af31-78473f5ca2c8}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{769c2e8d-f2e6-4a7c-af31-78473f5ca2c8}_OnDiskSnapshotProp.CRAB MD5: 0b786fb4b8b5dffdd405b4c4be11f604
SHA1: 718e122ec90b85272ec432370a7f7c5f664848dd
SHA256: 08a686392726d07d07ac59f7ac9e053377f77df0b596ad379a93d3f99e9b8133 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{94bf45cf-4822-43cb-a9fe-831f0233e98b}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{94bf45cf-4822-43cb-a9fe-831f0233e98b}_OnDiskSnapshotProp.CRAB MD5: 821a722a0b2811d835ab63607be5647f
SHA1: a9a5eb93f971de077c7704d2c47018ac0d3ae5aa
SHA256: 5d9c72c6b35f1a5bd99aba521351002f61d5ade427f57ef865196f2b243fae10 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{9d0bf28b-8dfa-449c-ae09-69210091e6b1}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{9d0bf28b-8dfa-449c-ae09-69210091e6b1}_OnDiskSnapshotProp.CRAB MD5: 8aaa52089723ac8b6888073a76bc0672
SHA1: 67952bc5d8dbb2c1a2978c8578e9220d27ceebb9
SHA256: b0e2c0609ab223fa812ed49231b6c520bfcc5f62621893332d2abd7c50d02cb6 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{9f994170-a62e-460e-95f4-d454e609b902}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{9f994170-a62e-460e-95f4-d454e609b902}_OnDiskSnapshotProp.CRAB MD5: 7d62b15719960ace0e5ad2f658c89a94
SHA1: d4b41d1fea31108b6090c16407d3f9dadbe453bc
SHA256: 9dca835912a8fb2378ae42b8087a197595f17ca491c98ec603abfce3c626714a 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{a39dd420-af4f-496a-b0d7-d3cc4fdd5e55}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{a39dd420-af4f-496a-b0d7-d3cc4fdd5e55}_OnDiskSnapshotProp.CRAB MD5: bf916125d680277a5269465677bea27c
SHA1: 0026194f5a79f627b805fd6caf9eb7df619414f6
SHA256: bc7773e1090ca5ed968a1fc2215061fdb10dd20ba203e4c69a3bda903e723b11 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{b1cfdd1f-2e6a-4855-9e5a-5ed651bc00a6}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{b1cfdd1f-2e6a-4855-9e5a-5ed651bc00a6}_OnDiskSnapshotProp.CRAB MD5: d50a8c1ffa8ce7509b9dbd9fb328941a
SHA1: c5084f3d093c482c8b6d579e2303a9a4c45e8e35
SHA256: 3d3591dcae793acfb6925db03b8467b7b951f58ef3ed60b55129f638b5263667 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{b93ef032-f284-4373-867a-0a7c411a3533}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{b93ef032-f284-4373-867a-0a7c411a3533}_OnDiskSnapshotProp.CRAB MD5: 9e16a8ac6124780e9d00065f416ffb01
SHA1: 8bf5e229d416a81aef057aa199e5f93b0bfa0d98
SHA256: a37e31baa926c7a8f4c49778f663a97cf2cda61acf8471b6633f267a88b9fc68 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{c684e574-aa8a-4967-87af-835ad01dac1f}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{c684e574-aa8a-4967-87af-835ad01dac1f}_OnDiskSnapshotProp.CRAB MD5: 9b8fd1f1be6d8465a59801e267957190
SHA1: 910258c5ea8d0e9fa71c68dd20a40cf1fdf96740
SHA256: 15a417bfa478526d380f59fab79e7951dba87e6c2d99983a38ecc039371c8862 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{d887cb21-a8aa-4c57-9af2-0e685e00ce52}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{d887cb21-a8aa-4c57-9af2-0e685e00ce52}_OnDiskSnapshotProp.CRAB MD5: c4c8693a3646d88003d2ba9d1a737282
SHA1: e1195929c1d75b00e2da4c32e63b1c3caf6ca3bb
SHA256: f01ca79c475affa6701f9a67d17def7397a2670ae77c6ac57e1ccfcfa6ff628c 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{e3ca7794-2c72-4a5f-8fcf-2d8eb6350cf6}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{e3ca7794-2c72-4a5f-8fcf-2d8eb6350cf6}_OnDiskSnapshotProp.CRAB MD5: c9a91667924aa81f5108498158c55c06
SHA1: 981ea04ac5339391db5f93824cc0f1ff85541a71
SHA256: a62561581f11e203f0ef2ecdb54a21379681151537a1a429693916252b1e4c91 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{f00aef54-2b29-4f30-9429-c13ae938f270}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{f00aef54-2b29-4f30-9429-c13ae938f270}_OnDiskSnapshotProp.CRAB MD5: b560059c606e12f5c32050261d14c1ff
SHA1: 5912fc6cc6ba7a6734673cda483336fd40d4351d
SHA256: 5168f654eaa2385a754b34f65e08d468e77661700a107a784398dcdd3bf2d524 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{f1963fd0-0ba1-4118-bf3d-f2391ae2db09}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{f1963fd0-0ba1-4118-bf3d-f2391ae2db09}_OnDiskSnapshotProp.CRAB MD5: da052c66e990da729a1db994787425fd
SHA1: aa1724c4bf0da0d2be02e7a22546abb592582f86
SHA256: b9f78bf8f89eb7f9d4ab218b6e6287549d92c76a75771da61303b0d3069121e4 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{f4fdf7fd-1b30-4a2c-8e9a-65221a85d66c}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{f4fdf7fd-1b30-4a2c-8e9a-65221a85d66c}_OnDiskSnapshotProp.CRAB MD5: a5eb4c535cc662a1d10f3254bb0ac041
SHA1: 4de5295eb104c407346b6be37bd95d3db3b6cd17
SHA256: 48f00be28d5a77c2dc6b939f7b99c7e3c9087cf4c4116cc94b422f0f89ff4207 		Access, Read, Write
C:\System Volume Information\Syscache.hve - Access
C:\System Volume Information\Syscache.hve.CRAB MD5: d9b0352752e8fe3d577c5929b32794f9
SHA1: cffedb3b8bd0148fd50c9a1046dbba5b6dc97c58
SHA256: c3b96263c67d8319aca3d9dbeb8b9e420c16c8b1fc62304472435ef4e92920b9 		Access, Read, Write
C:\System Volume Information\Syscache.hve.LOG1 - Access
C:\System Volume Information\Syscache.hve.LOG1.CRAB MD5: 59bc9e31a0428eabc39dde171d5fbd7e
SHA1: f61d231388feded7a422e853a37d587aaafb0147
SHA256: de90c4d5d534b2e82cce7e12ed3a8af9d7765508a7bf703e6ddcc908a289aba0 		Access, Read, Write
C:\System Volume Information\tracking.log - Access
C:\System Volume Information\tracking.log.CRAB MD5: 61c09867f8af19edf74b9b5e45d3b1d9
SHA1: 8502152abd6f9cbb0f92264a1f46858d26ac8c36
SHA256: 0ec11cbe929329634047e4f415436899189677e09323639dabe9d1a25012516e 		Access, Read, Write
C:\System Volume Information\{086bd6b5-6870-11e7-8470-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{086bd6b5-6870-11e7-8470-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{086bd6b9-6870-11e7-8470-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{086bd6b9-6870-11e7-8470-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{5369f26b-5d78-11e7-9002-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{5369f26b-5d78-11e7-9002-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{5369f271-5d78-11e7-9002-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{5369f271-5d78-11e7-9002-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{5369f275-5d78-11e7-9002-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{5369f275-5d78-11e7-9002-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{5369f279-5d78-11e7-9002-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{5369f279-5d78-11e7-9002-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{5369f27d-5d78-11e7-9002-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{5369f27d-5d78-11e7-9002-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{5369f282-5d78-11e7-9002-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{5369f282-5d78-11e7-9002-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{5369f286-5d78-11e7-9002-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{5369f286-5d78-11e7-9002-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{5369f294-5d78-11e7-9002-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{5369f294-5d78-11e7-9002-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{6af7a98d-5d7d-11e7-9bb9-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{6af7a98d-5d7d-11e7-9bb9-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{7d6ee35a-5d77-11e7-ab40-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{7d6ee35a-5d77-11e7-ab40-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{7d6ee485-5d77-11e7-ab40-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{7d6ee485-5d77-11e7-ab40-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{7d6ee7d2-5d77-11e7-ab40-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{7d6ee7d2-5d77-11e7-ab40-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{7d6ee7d6-5d77-11e7-ab40-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{7d6ee7d6-5d77-11e7-ab40-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{7d6ee7da-5d77-11e7-ab40-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{7d6ee7da-5d77-11e7-ab40-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{b3b06227-5d7f-11e7-8a02-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{b3b06227-5d7f-11e7-8a02-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{da689ac8-5d73-11e7-8702-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{da689ac8-5d73-11e7-8702-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{f838e7a7-6707-11e7-a8fc-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{f838e7a7-6707-11e7-a8fc-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{f838e7ab-6707-11e7-a8fc-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{f838e7ab-6707-11e7-a8fc-0060389bba01}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\Users\aETAdzjz\AppData\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Local\Temp\\pidor.bmp - Access, Write
C:\Users\aETAdzjz\AppData\Local\Temp\qwerty.exe MD5: 768f77e57ea0ebe6c13060b74653b32f
SHA1: c7834bf82fa64a192a259bfb79a0892d230278da
SHA256: 589e188602c4a24c68bc095c1105894a5e97e1df6218eaead89b7ab9a4e88eac 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\3I-LDvLH0.ppt - Access
C:\Users\aETAdzjz\AppData\Roaming\3I-LDvLH0.ppt.CRAB MD5: 4e611e186b1636943c1654eb0cc32122
SHA1: 8cf88d5fb3f94511251fe3ba0647221414391d49
SHA256: 1305598c574ec0e82497d5a406cbae40a54d828b9b0af632f414b78b3e0d8aa4 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\4eWpORekA.mp3 - Access
C:\Users\aETAdzjz\AppData\Roaming\4eWpORekA.mp3.CRAB MD5: 9e7f4497818cfa685399a175227bd7cc
SHA1: 1a2c8640d0dc0878e6c7ba3354131844325eabc5
SHA256: 5b0b74cc614be61fb404f20032bcef210b7330c0ab1ab235606d0207bec0fba1 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Acrobat\10.0\Collab\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Acrobat\10.0\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Acrobat\10.0\Forms\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js - Access
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js.CRAB MD5: a2f1b7a00369045dbc51a56e10974ce5
SHA1: 3ce730cd831254e5730c371cf74900fafc42ff1d
SHA256: 4ce2a8c7d9867a9dca98be401e10af28a33c197f9f351b75d743618114ac2b6f 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Acrobat\10.0\Security\addressbook.acrodata - Access
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Acrobat\10.0\Security\addressbook.acrodata.CRAB MD5: d2573f49d84c8b7902d27d679a2f4b38
SHA1: 4123aff4631edeb48dbdda4a83064a8eafd086d6
SHA256: b794679eb3f4ad8bff9e72765cc61a9aef81a77b61c0a117d37f07891edd743e 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Acrobat\10.0\Security\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl - Access
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl.CRAB MD5: b40f87a82b26222445ecaddc6c02dc4b
SHA1: 97b571f632242ba60cabab6c193baa475d654d7f
SHA256: 88d0f80e755ec4f4bdcbf15f4ee4d893fc65cef0256547cc99c8943bd2c6029d 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl - Access
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl.CRAB MD5: 543041fa9e4f820209b3561b1a81107d
SHA1: d010ecf6383ee72e3aeffb6af0d6c1e02c1f4822
SHA256: f132ef918163e88070073c1673a8510360d4b4886d6446d02c8410d989c6c250 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Acrobat\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Flash Player\AssetCache\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Flash Player\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Headlights\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Linguistics\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\Linguistics\Dictionaries\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Adobe\LogTransport2\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\CnXo4oFZ-2lW.bmp - Access
C:\Users\aETAdzjz\AppData\Roaming\CnXo4oFZ-2lW.bmp.CRAB MD5: b9f5f0c879e0782aaabcbddae0dbb8fa
SHA1: 043da47bdd302ba7090b4c87fd1a90a4e24f1ab8
SHA256: 43805751c0d7f8f35b1dcf37988aa377befb4257004f7d012515388d29df0bac 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\E xZj_-0MTe61j1y7.png - Access
C:\Users\aETAdzjz\AppData\Roaming\E xZj_-0MTe61j1y7.png.CRAB MD5: 3527f64f4d40222161e004a52f6f52d7
SHA1: 4e50834a02df9b6724011bc1a22820cd259a0752
SHA256: cb86435f05fd335d53ebf359c640b5abff13703dcd821f6783487a0772cafe75 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\EP00vF8FACU03CTBnmfF.odp - Access
C:\Users\aETAdzjz\AppData\Roaming\EP00vF8FACU03CTBnmfF.odp.CRAB MD5: e38cb85d94d03b3468ed2ed87abb959c
SHA1: 5a7e46fa913b95aae5fc136246dbb90481341a37
SHA256: 76ca7ce6f71d86c55b0dad027b708f801fed6b52016e664b444478c3d95cd234 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\eSgmrbYFuXkNPc.jpg - Access
C:\Users\aETAdzjz\AppData\Roaming\eSgmrbYFuXkNPc.jpg.CRAB MD5: b8f564643696fea1461240c955d25fb7
SHA1: 99991dd846f9a3b2332e893ce7102a2502384df6
SHA256: 0b94bcb236dd27888b1065015737385660ca555c3d575f404645c1ac9b311b22 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\FxtVW3aSn.jpg - Access
C:\Users\aETAdzjz\AppData\Roaming\FxtVW3aSn.jpg.CRAB MD5: 1996410adfeef9d298f817c6a5941969
SHA1: 7c192a5ae7517676a7ac6502bca2d5768352c91e
SHA256: 7a2082eb59643a90a336837503a75599a559be32082a381e2b5dff2d0ab8cf83 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\GvkrGagP6w1l2HzuOg.gif - Access
C:\Users\aETAdzjz\AppData\Roaming\GvkrGagP6w1l2HzuOg.gif.CRAB MD5: df0e728cf2d11b59a2346d2a2ecd1556
SHA1: 71170e501ecc6f263cff596ed1802bef4e9de215
SHA256: 96c80464da76d624eeccec347889a14cf825309f281b97c7892e9d99e163426c 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\h0cBvpNg ittDsph.jpg - Access
C:\Users\aETAdzjz\AppData\Roaming\h0cBvpNg ittDsph.jpg.CRAB MD5: ab8220ad9601a9d618ba1299cd965142
SHA1: 1bd928543c12d0abb6a74abc60abd7b0bc96bd3d
SHA256: 4bdab5129200312e71d0799719ac57c3c4ea6a87117726411f44f45412de778c 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\hOow2yZez.wav - Access
C:\Users\aETAdzjz\AppData\Roaming\hOow2yZez.wav.CRAB MD5: 19eb469de685db066f54db82289ce8bf
SHA1: 406e39ffbad59555f58dc5b1894b1776b1775e5c
SHA256: d4443c235f42e869f3b0e98b4193ea2b1f74a4f7ac2f98ff915e83ebcdf8b06f 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Identities\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Identities\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\KDtLH1.png - Access
C:\Users\aETAdzjz\AppData\Roaming\KDtLH1.png.CRAB MD5: 3333bcbafb82b2d11ac6c257f7b1c714
SHA1: f7587a444fbffb3e6dba4b53d2fdd03d6f8d868e
SHA256: 195f38d62081637b9354a227958eb89d856cdd78194c7924ea6f7eda90471810 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\lZvkkvRkZTf.m4a - Access
C:\Users\aETAdzjz\AppData\Roaming\lZvkkvRkZTf.m4a.CRAB MD5: 1a4c07b6e1a8e2a78eb10709082ee20a
SHA1: aff698e91b1e98e5ce97e4bb9d24d69cee31fc0a
SHA256: 51792521c3545a1910639e729adc75b9725e600516025b2dac43ac8260b17e27 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Macromedia\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Macromedia\Flash Player\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol - Access
C:\Users\aETAdzjz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol.CRAB MD5: c3a2ca768b82a4208abb05e2f849f3b0
SHA1: cedc07f526ff8c8c6517264ffbd493ecefea6993
SHA256: 66ae511b4016a83b7f346a3969247965954e0cc7b2c6603ce690dee9a0f5db62 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Access\AccessCache.accdb - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Access\AccessCache.accdb.CRAB MD5: 83e01baabe1d24be8ee7e44fe2b0e5a7
SHA1: 630a672ed3a86bbd0b33b6c5c1395e8d7fc75f8c
SHA256: a19b638b87ab18f28c08a7bb48374a89f019cb8d895e556e218641f21b7654ee 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Access\AccessCache.laccdb - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Access\AccessCache.laccdb.CRAB MD5: dd45a4ed4c12eca10516b2573309390f
SHA1: 997085273854e456c7b98b408a36de6014beea66
SHA256: 64e8ea17bd6c0e03a270352e649ff5d3aacd8024bbe96389b620db84aada1c8c 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Access\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Access\System.mdw - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Access\System.mdw.CRAB MD5: 7d2e6d8ab629fd1bd233e9bd2cfad485
SHA1: caf51878624b75ccd8e3d000244919faa38c598a
SHA256: 056e2bf8ef8444d857913932bf98ee1e7a54d51418f4a01da1059f79ac51dd01 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\AddIns\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\APASixthEditionOfficeOnline.xsl - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\APASixthEditionOfficeOnline.xsl.CRAB MD5: e8c6dd0c3b57326284175319439e874a
SHA1: d599e8559b4868f0836da7800f08d0e1cceb32fd
SHA256: 6d10e82c72203267144d22c2772923f4203eab637930c352a1cbfce0af4159cf 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\CHICAGO.XSL - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\CHICAGO.XSL.CRAB MD5: 840dd2570808df82f827898534d2727f
SHA1: 40b32177ad4690818002f7309e714028045a8f0d
SHA256: 514dc8fb57408d8bf91023c1b32c21e45f852bb42a5d8493e850d4e56c8f25af 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\GB.XSL - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\GB.XSL.CRAB MD5: a6f10e1dfac104352dfb6523dedfdafe
SHA1: ece079bc00b3e99c5fd8ce8084b42239be3aedaf
SHA256: fd65bfaccc8ad5136b53376cf069bfb89ee733981f370b7e3590f1c908434d90 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\GostName.XSL - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\GostName.XSL.CRAB MD5: 56924c9f46136da2f0475820297879f8
SHA1: 9272d69b791b19874b10dc995692e8295f4db05f
SHA256: c2f696b04a128172121f0d6b22363323e7b3ac2781354610c42b67b08a9d7f66 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\GostTitle.XSL - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\GostTitle.XSL.CRAB MD5: 6e578e7032f9427b6d15fca5abf8d5c6
SHA1: 42d51d4966cab2341aeef40bbaca6757414e83d8
SHA256: c1999637137aa004cc1dcf81d7e117fe8ffc5fbb352126e7170fba32a51f3a2d 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\HarvardAnglia2008OfficeOnline.xsl - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\HarvardAnglia2008OfficeOnline.xsl.CRAB MD5: 87c39385a5c71e397fe6b87181eec239
SHA1: 55394439c68dad6bf7178c6be6c24939a57cda6e
SHA256: 7252e16942092cf4a62c350d1890cfb68f1ac463336b2e43321b01b7e881d556 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\IEEE2006OfficeOnline.xsl - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\IEEE2006OfficeOnline.xsl.CRAB MD5: 12c50d03a674e5cf1dae5cbde6e41a34
SHA1: b6f1f960620a1d84d55d3b82ac5269490d3e8d6e
SHA256: dea0e5e5f6a6cb860069707ff591afcc5d6795deaad78730306e5e202d32ac86 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\ISO690.XSL - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\ISO690.XSL.CRAB MD5: 69d4305d20275cef03d058a8c286025b
SHA1: e613a0c5d2dcce7254bc39a7345c0c3cd81491e7
SHA256: bc99235e148bc014c706b6f36d75bfe0a67e97862f5222447e40bc87335d6424 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\ISO690Nmerical.XSL - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\ISO690Nmerical.XSL.CRAB MD5: 4e2dcb52b94b196d2fc6af6e01ff86f4
SHA1: 5cee436659308aaffa74e7992d4bf7e41e18c05a
SHA256: 57eeb15b9f8172d798fd9d37df3052195bf55ba6887082335469eb08a8b011bb 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\MLASeventhEditionOfficeOnline.xsl - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\MLASeventhEditionOfficeOnline.xsl.CRAB MD5: b46c8527898c28f16ac175069ffa7364
SHA1: 3566668a857ff1990fd4357516b4a6d5695b7e7d
SHA256: da1b7efade15ceadb5a84bd109e76ebbe0128d912c79750497bf121640dcbdf5 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\SIST02.XSL - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\SIST02.XSL.CRAB MD5: 753293421402c5b018a4a1d1fce36b4a
SHA1: 0134d7754a8980e9fa4ce066df1c897204c231b8
SHA256: 7deb572d26ba6b76d2151b72092dd1ebb8e912951df09dae9bcbeaa62a255d6b 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\TURABIAN.XSL - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Bibliography\Style\TURABIAN.XSL.CRAB MD5: 7a83d5f49fc2a85682aa4ade5ce6685b
SHA1: 94a17283ee65f9b6df94999db88feea0610f634a
SHA256: 66a36cdec54e88c9b4645ed6555298082bd2e4fde177949afbe5a909f7933918 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Credentials\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Crypto\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Crypto\RSA\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2345716840-1148442690-1481144037-1000\83aa4cc77f591dfc2374580bbd95f6ba_500c0908-381e-49dc-a6a0-1a800e9a56e0 - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2345716840-1148442690-1481144037-1000\83aa4cc77f591dfc2374580bbd95f6ba_500c0908-381e-49dc-a6a0-1a800e9a56e0.CRAB MD5: cbdc295e882f5ecce15ff078cb00c788
SHA1: f52b18e464b6329e1786d07f529459cabaf32598
SHA256: b71a07b8682b291c5df197d4055e3057823086312f09a5853f63078c94244ee6 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2345716840-1148442690-1481144037-1000\8b5db95fe05dd9b00e55df22e826ce4d_500c0908-381e-49dc-a6a0-1a800e9a56e0 - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2345716840-1148442690-1481144037-1000\8b5db95fe05dd9b00e55df22e826ce4d_500c0908-381e-49dc-a6a0-1a800e9a56e0.CRAB MD5: def54c3f31956753d0f65bcbe5a1991c
SHA1: 516dd25444ce082e6430a527d842173dfdd7c685
SHA256: b53a3c5247e3ef5f4dc8d6199dfc84e1df90d033109edf7ba1eeaedb49ae3ebb 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2345716840-1148442690-1481144037-1000\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Document Building Blocks\1033\16\Built-In Building Blocks.dotx - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Document Building Blocks\1033\16\Built-In Building Blocks.dotx.CRAB MD5: c83bfe319b83d350a073bdb0ae9deee7
SHA1: cae80a27de3713aa7a9b037a8e3585993dc5f42b
SHA256: 885bce5b3bdd749ceaaa189aabb4cd6a2299a6611ecf4fdc785ef5bd5ba57c80 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Document Building Blocks\1033\16\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Document Building Blocks\1033\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Document Building Blocks\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Excel\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Excel\XLSTART\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\hojffa.exe MD5: f563adf489b43a4fa6705a43b66cefd4
SHA1: 4889f1ba1af9d3dc1a31ab30ab782c64d06ba592
SHA256: 18e29dfe749c58626179e04ced6b005527a3185a0f309da0b5dff50b89a19011 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\IME12\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\IMJP12\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\IMJP8_1\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\IMJP9_0\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Internet Explorer\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Internet Explorer\UserData\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\356BZ594\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\index.dat - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\index.dat.CRAB MD5: 1b8fa9ea6d55e65bcddc60b43eda0c6b
SHA1: 19b057fafbca7e75338d758aae5fbfea05c49e33
SHA256: e427836ada847f9e2a92cd4c6c78b3afbdc55029d8d2a25a00e570b9f55add5c 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\N4CF7XJW\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\WIK9MYAA\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\ZE5P2FRT\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\MMC\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\MS Project\16\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\MS Project\16\en-US\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\MS Project\16\en-US\Global.MPT - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\MS Project\16\en-US\Global.MPT.CRAB MD5: 8770d733cc8696aada433e7917ea77a3
SHA1: 1a78d6c20e852b6e5430c7f69d6667054b412b96
SHA256: 796d2f944160e95d35319af46ea929c540cba70c569599c8f742488f7c85ea5a 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\MS Project\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Network\Connections\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Network\Connections\Pbk\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Network\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Office\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Office\MSO1033.acl - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Office\MSO1033.acl.CRAB MD5: dce616b8ff6b48bb9f94ff068b0403a5
SHA1: a2a36f5164b12379831118da04c595a1fcd2577e
SHA256: ff95fbf04d8a465cda063d9214026dfaa8348440eafd6fd45a5ad1f37f9ef05f 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Office\Recent\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Office\Recent\Database1.LNK - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Office\Recent\Database1.LNK.CRAB MD5: deabd417da7459c41dc2a0647db48b57
SHA1: 4dee68ecdfb146c9a5100451619b4c1b6fc645a8
SHA256: 3aea52b1fad9f9b42a5722cf4a064aa50dda1ef5ecc634a7a0ca00d115b6419f 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Office\Recent\Faith's Resume.LNK - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Office\Recent\Faith's Resume.LNK.CRAB MD5: eadafcf1f3e1850f594984d067a3590a
SHA1: 3f93bbf1a8dfefa0052b031db0b315b67356df49
SHA256: f44162a5821ee0fbdaa00aa221c866f6f430b7ce7fdfd30419e203c6a16d6f66 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Office\Recent\Global.LNK - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Office\Recent\Global.LNK.CRAB MD5: 78fedaa2d42cd74d1354c84c9864774a
SHA1: 0df32d29a7aae9d723a858809f654e42b6a2d160
SHA256: 7c503b31191a9082c23d6e8373c34fe71ba7cc93045701c78d770cf725a12bdd 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Office\Recent\index.dat - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Office\Recent\index.dat.CRAB MD5: 3d5bd7cc365fa9fa0db9e1465068cbd4
SHA1: e687e8708130a8e23a785339f54f02eccac89276
SHA256: c7eb6e4d7e69af57e6daaa226f83c585c1e173ed5e1d36e4c27a99d912eb6815 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Office\Recent\My Documents.LNK - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Office\Recent\My Documents.LNK.CRAB MD5: 6f6af7b7b6f71a3deecfb0aa8534a094
SHA1: b858e545503e0c2399fa2b97a44926540176f00e
SHA256: d784af558fc660adbfe7b36d47d7596c0ae8d5eb93d08f21a0c7deab75db9abf 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Office\Recent\Templates.LNK - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Office\Recent\Templates.LNK.CRAB MD5: de09ea743b43e6e8a06601fdc68cc7bd
SHA1: 0b1817a0e2816d2d35b508450d32838ee42c5820
SHA256: 38b09abde8a78a828416b3cc9ecb210db1cec1867810ec609a4bc16f4dce5e32 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\OneNote\16.0\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\OneNote\16.0\Preferences.dat - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\OneNote\16.0\Preferences.dat.CRAB MD5: f9e38c0ab6d4f4fbb5f3a252fb5fa348
SHA1: aacddc922d4e30a72c789266d420af8e61b48d13
SHA256: 8d58ac7f9be14dd213c5013e22c78d5e42a90c26e5b2885c1b6d6fcb3b66b13b 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\OneNote\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Outlook\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Outlook\Outlook.srs - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Outlook\Outlook.srs.CRAB MD5: 0e7fa7461a79df201dbea938adb258dd
SHA1: 4810c36fa8b7cf5583f17757746d803602baa258
SHA256: 0df84ca6676083d2112dda7c8bebd0f13c23386d8e5756b9febecd4a70b84f6b 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Outlook\Outlook.xml - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Outlook\Outlook.xml.CRAB MD5: a3fd16fc76d3ea86b19001a805f9f33e
SHA1: 9a3dd1e80897c816f81e07b845c30c720a9a9309
SHA256: 082310fbe0ca73d1e0d9cfc6ba1f8825c9b35f8d6196eb4afa2a494fcea39c51 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\PowerPoint\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Proof\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\CREDHIST - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\CREDHIST.CRAB MD5: 3778355f29ba981271b3eb5cebd2d94e
SHA1: 410faf9f85aaa1529d9339bf665a4160fc3b8027
SHA256: 134049dad67e6b835b8933e02aee69a988420615b88f225829d6312ab2aa61ce 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\S-1-5-21-2345716840-1148442690-1481144037-1000\1862f3be-4467-4925-a93f-badcfb2203ba - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\S-1-5-21-2345716840-1148442690-1481144037-1000\1862f3be-4467-4925-a93f-badcfb2203ba.CRAB MD5: 43be25b8e81af3a4c3a70559b7f7c07f
SHA1: c8c93dfa4721449f0f4b6cd65970198ee98d5a4d
SHA256: 38dc2878ce53b1ababe9eb854dfa872cacaccb977d067fe255dc5e23af5100fd 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\S-1-5-21-2345716840-1148442690-1481144037-1000\8d3ed5bb-9674-4045-8be3-b9270b93e90b - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\S-1-5-21-2345716840-1148442690-1481144037-1000\8d3ed5bb-9674-4045-8be3-b9270b93e90b.CRAB MD5: cbd4e534c70631bf3bc970fd1728c038
SHA1: da4cb27a145ff4278604afb579b837ec410131fc
SHA256: e4100c57de0a54c3964cf6ccfe5caa89893b18b576c94b7454e885101109e619 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\S-1-5-21-2345716840-1148442690-1481144037-1000\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\S-1-5-21-2345716840-1148442690-1481144037-1000\e9d127d6-64ac-4353-96d2-c19aaf9f738b - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\S-1-5-21-2345716840-1148442690-1481144037-1000\e9d127d6-64ac-4353-96d2-c19aaf9f738b.CRAB MD5: b69f7548c10ca1ae9f3bb0e48f7dbced
SHA1: 789817f537afc0ef38551f680a435bdbc6aa750c
SHA256: 0d64a8e26ba46ab945a857ba275142050474923b6e460a7c30c96ddc4f4927f5 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\S-1-5-21-2345716840-1148442690-1481144037-1000\Preferred - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\S-1-5-21-2345716840-1148442690-1481144037-1000\Preferred.CRAB MD5: 443fbfc6ad5734921d2e517f86fa6237
SHA1: b7af2b98d2e6122861be35581bfd28cc9cb6c5d1
SHA256: 667d7a9af9308adc9b68fe061ede8ab74adba2b28cd58c016f6edd8cddc7e94a 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9 - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.CRAB MD5: a268ec9963245f209311104d34720def
SHA1: 117c8f1c338e62a329ebbef6f5117ce036bf216e
SHA256: 187754bc498cc3836abee867ac74f5fca3f85b513d1e17e108ff16c7a71e4939 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred.CRAB MD5: 5d29621e9d9100570fe0a80df7b674cc
SHA1: 261bce30f05a203db0bc7b33d4c7f63999109e0e
SHA256: 2bd509c6fd29a00d8a633faade9336f88a78f850f7ff11d83cc98d78115d09aa 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\SYNCHIST - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Protect\SYNCHIST.CRAB MD5: 09753e578dd1dd43a110ab1d555ed293
SHA1: 510dced2082b9c34dcff7937a1ee0e8408151a06
SHA256: 4ddff9363e6f3ce654406877f8ca21f047fff86cb54688f5438ef21eb93e7fc6 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Publisher Building Blocks\ContentStore.xml - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Publisher Building Blocks\ContentStore.xml.CRAB MD5: fc98c9026886d848cbcb775e0748fa81
SHA1: a4e479b62269999e4af7fda6521d4890e9f39690
SHA256: 09996890e3ab21f8e798ca15545c50838ffbce2837221b6a81dfe01b15e6cb44 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Publisher Building Blocks\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Publisher\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Speech\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\SystemCertificates\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\SystemCertificates\My\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Templates\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Templates\LiveContent\16\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Access Parts\1033\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Access Parts\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\Document Themes\1033\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\Document Themes\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Templates\LiveContent\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Templates\Normal.dotm - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Templates\Normal.dotm.CRAB MD5: 521b0b611a83e531564a27fd2a4b94bb
SHA1: 808f10c643859427346136ed5e77da5b33dab404
SHA256: 496d71d2be91172d4adb9059a8e5b639106a0c2afe6f65367247f5ffc8e0c0ab 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Templates\~$Normal.dotm - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Templates\~$Normal.dotm.CRAB MD5: 5a856257740303cc06a5fb748a781b7b
SHA1: f8e6eda7d040bda7a55d022aed2da09d5245f686
SHA256: 81c71388106707cdfe5a6543c12899298d86ff6830cbc7eecfc077add1012004 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\UProof\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC - Access
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC.CRAB MD5: cbf283a0ebcd2161825f10f5b8f5b0e3
SHA1: 41f99b8e099e74cdbc6cdb5b9d11ce8953bb28c7
SHA256: d735b2b6be0b188bc6093d04da1bd9e8090fabbf0433bdcfb88ca5db0b9b8154 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Word\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Microsoft\Word\STARTUP\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Extensions\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Crash Reports\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Crash Reports\InstallTime20131025151332 - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Crash Reports\InstallTime20131025151332.CRAB MD5: 60557587b1bd168d6c5148070ef7c69a
SHA1: 621dba77dee2dd115ad556f5778ad6bf152e78a5
SHA256: b117eadf0bb109085190b50b212e107a66d1aa12b55db70295011a0b3a5c4972 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\profiles.ini - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\profiles.ini.CRAB MD5: d1f4818f0d0f1961f6220380f6b0b47c
SHA1: d0fe66c44f3ce93eff7876fc049e17b66fbcd148
SHA256: 27c284016307cc84691ca171bdbf46695f89c39593c379c5fec4107813085143 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\addons.json - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\addons.json.CRAB MD5: e32a1a18a955c9f2e0fb69cf7763eefb
SHA1: b8538f08379c030a9fc15087d68a84add105beba
SHA256: 192ab708d23aefec40db206dacea6cb201511a132655bd1cb53c4cb2855d1177 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\bookmarkbackups\bookmarks-2017-06-30_5.json - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\bookmarkbackups\bookmarks-2017-06-30_5.json.CRAB MD5: d0e8121dd41a12224a8eb59ded64ac97
SHA1: baae527e9b6559f7651281c46cfa6fabd76c2039
SHA256: e3dcd3a2564001e8e5ff629c0336db79bd3a4ead4a1c7e4c0574a0febeb45a99 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\bookmarkbackups\bookmarks-2017-07-26_5.json - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\bookmarkbackups\bookmarks-2017-07-26_5.json.CRAB MD5: d4af25f86aef30a2e8155a44f44b8a67
SHA1: d6a9b2512a1df3f9969155a11e6e991f7bf629af
SHA256: b1bf04d38bc4acb521f2b5c4b68d7f2a6683cece06098cb0633a952cb777e3a8 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\bookmarkbackups\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\cert8.db - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\cert8.db.CRAB MD5: ff5e3d6b56dc5ddac3b31ea1683673ca
SHA1: 0ab053cec2d0fb496392e57be2ad3197d02c41e6
SHA256: 6cb468f648b3a06ab580e325025250c7b7b45ca534c3442c1a49008b634164ed 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\compatibility.ini - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\compatibility.ini.CRAB MD5: 93b8d9391f8be571cdeeeb96eda5a880
SHA1: 94bfbf1817251273f8a3c6d9fd68a164d0ac452b
SHA256: 3021d337ff27bc9ce32027f1776d49cc7acfe8026d7034703116bf22ec72214f 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\content-prefs.sqlite - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\content-prefs.sqlite.CRAB MD5: fdecc9f490f265769a93ce4b3e291750
SHA1: 3b9a02be53efd397732b152e682263ea7c3146eb
SHA256: 498cd297123d7e8bc0d327657cef267235c15f5b28b6fe2c4b115de557a3990f 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\cookies.sqlite - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\cookies.sqlite.CRAB MD5: 96f502286fe01464471fa721e79b39ee
SHA1: 1ecc4bd12af1087159a8e1428265f4cf87852740
SHA256: 05dc6622646f77cd392d5bf2f03380d1a31e3170d9e3ea59807a1641e5b1bf6f 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\downloads.sqlite - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\downloads.sqlite.CRAB MD5: d3d1fc8091c351ed5246e69e96586039
SHA1: cadad8f9e3c079303583bc2c13bfc07efe26133f
SHA256: 7dd1ff7403cd31f98228534359b695721043533341c3e77aa4ee5028f8c927e4 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\extensions.ini - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\extensions.ini.CRAB MD5: a22d1d653d36636db05d479c623cb0ff
SHA1: b4ff90a91c85fa1059fb71bfd90a7a9fa88c8808
SHA256: d6993f3732f069a65773c66302a992b68d01f316144a3c2150730e31268cbdd4 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\extensions.sqlite - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\extensions.sqlite.CRAB MD5: f0210b8e8e7e304e79a6b81783910e9c
SHA1: 7ef4deee048bcbb3a64c9c5f484a0394da8b9ddc
SHA256: 6ee6e2134cb6e7bad6cb6a2d0548e88cbf072ca8c1776c2d0dbe2e86ed793ef5 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\formhistory.sqlite - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\formhistory.sqlite.CRAB MD5: 6a66e2d7a16101b2e6bb5c7c00b9d38e
SHA1: 4a89bc9b6780cdd968a5ff756d8c6b39f2e50984
SHA256: 536a27bca4b3b94372cbf4fe1ca566c1d48f94ad69424d6933d9d1e0ce65bdcc 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\healthreport.sqlite - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\healthreport.sqlite.CRAB MD5: 5e02cf5bf85c34ed2cf2ecdedb38d993
SHA1: 91634954b5f53ec1b79c73b818867a9be676dea2
SHA256: a64660e42989748ece180533fd01e8117ce69383ff13952d8a5ca871568681c1 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\healthreport\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\indexedDB\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\indexedDB\moz-safe-about+home\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht.sqlite - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht.sqlite.CRAB MD5: 8375d7f1ef1a7d4cb06ecedd33c8d313
SHA1: 914e57709204ad35f8d10e55584d9c5daa38771a
SHA256: bd0521a6b8b04163fac4f849a147c80c7a4005a5bf1e03c1ac70483a3c65859b 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\indexedDB\moz-safe-about+home\idb\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\key3.db - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\key3.db.CRAB MD5: 3100664ed611c822e4a09640ad5e5faf
SHA1: e8656433471c0d9435739407e242578d08148a6d
SHA256: c1068b97b8916e15221cb4963d1d5c4342be007337467492bbc9ac2f51fb9405 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\localstore.rdf - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\localstore.rdf.CRAB MD5: 25ce8c1dc67e94c5614e0c8e941fbea2
SHA1: 6741f9daf347e58239d897139c15d9cee52a124b
SHA256: 7e782e04a881cbec343ee5287672ec424066365f2db1bd4587d20fc1e585fe4e 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\marionette.log - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\marionette.log.CRAB MD5: 1d7e2aefc2f4eaa7f256b4f921036959
SHA1: 669e93ef662595d311c25edc7bf77adea0ca179f
SHA256: 19d19c80e4d64a96dfcad182827cf5e938f65f8a8d8cab2b39507923710cfc8f 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\mimeTypes.rdf - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\mimeTypes.rdf.CRAB MD5: 886194b9a89c68ba6a0e7f5fa091cee5
SHA1: 58c7fd2cc769bd1c75a636c185c18b37df351deb
SHA256: 11ad29bad88139e9e06c6c153191c1658872319cee3238255c8727f232ab1b24 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\minidumps\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\permissions.sqlite - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\permissions.sqlite.CRAB MD5: f0e36e44bd01a99ffeff1c5d02a435e0
SHA1: d2266f13ab0c5a8bbbca3dfdfc9e5d723680438a
SHA256: 4ab2956c4e7789d2f4d1766d44e062f4ef7dd1cfb7338be125975fc8772651cc 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\places.sqlite - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\places.sqlite.CRAB MD5: 0bc17f32a242ef3d677ea37231406e77
SHA1: eeef5e6f8571379b9c9fb673ab0c4ec8e448c807
SHA256: bf3226cedb2b6e792e1a36302e2384dac3f00355128088695583ceea83d3ccf4 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\pluginreg.dat - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\pluginreg.dat.CRAB MD5: af6bec8e52cf75efe29b2ab8d261e4c3
SHA1: f0317078f73dbf0c5b7e8c3da83239e9b44699a1
SHA256: efc7e753703f0c8cde542779fb4988e6fefd542c8640647ee30dc5077a6a47ee 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\prefs.js - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\prefs.js.CRAB MD5: 853048b71697c93339f919f8bb120e63
SHA1: 0e3e71bda3d83ab407a0a0f02739b40ce08e23d1
SHA256: 9e76f482c03ba6fd54ef1cec9b4cc0475501f2ad26cdbd0ed3ea2728e16aa7f7 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\search.json - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\search.json.CRAB MD5: 04768d4a94eef56d89b2d347a5741c1b
SHA1: 478bec2e5d4c3e33a45d53376df3b3ac23e550ee
SHA256: 23e2f74ae79de6656793abafabf22856fbc5cac7a8471a6690d71362adaefad3 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\secmod.db - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\secmod.db.CRAB MD5: ba505d723e55fd50009a44dfbdc0146f
SHA1: 1683cf9f7923fc6b16c16ae315e1d2f18f1cfe22
SHA256: 2250a9096020c4da6d38d1d143263a930c8e7a2841712b875cf515d3441a8538 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\sessionstore.bak - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\sessionstore.bak.CRAB MD5: dd1133e5b5e35fdaeef4bd4c93a1227f
SHA1: aca1ee2c15f25214938ad328690cad79d2cd9775
SHA256: 41717a5aad2d8165d33536d3aa1362d3ed1d5cd594f4b5cd36169f9f3ac263ef 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\sessionstore.js - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\sessionstore.js.CRAB MD5: 044297ff76243f8948ce18ea32b6571d
SHA1: 2a9fc31c68fb0ca86bcdd7231bdf41492b44cde3
SHA256: a8545355a3d7200b8cba56307d62cdeab59f9b7c285216f0fb18286de16f889a 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\signons.sqlite - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\signons.sqlite.CRAB MD5: 2f77dd87cf336287fab3a982a408bc39
SHA1: 2020e9971f5d248c5b62f53a360dc2d53d8fcdbe
SHA256: b1b38dd5989b3c9842abfb52d5cd41b70cbae813d08e632dae3bbb9ef3fe6111 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\times.json - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\times.json.CRAB MD5: 9120fba88c8301edcd83aef13681a6e3
SHA1: a79cb48a9d82cd2b38a0ac34d377bdab0c28be9f
SHA256: 158e57bce0064cab348f4212ff1102e1114acbdb403dfebc8d1f9d0c367fe10e 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\urlclassifierkey3.txt - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\urlclassifierkey3.txt.CRAB MD5: 1f2f94922be60c4c0bc511bc371ef6fa
SHA1: d820908c54097814db4af4b4c916376687ed3dc5
SHA256: 0ecaea1bca266c8e25c592cb45c8a7624483e0e0e7fc6b54feba8f88ba8d804c 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\weave\changes\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\weave\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\weave\failed\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\weave\toFetch\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\webapps\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\webappsstore.sqlite - Access
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\3y2joh8o.default\webappsstore.sqlite.CRAB MD5: 2a5f341cfbb822651ade4db8daccad1a
SHA1: cf5df8f0c3a643caab8bab46f5f32bddfe08e4b1
SHA256: 657c82bb02450ff0f0e269507cb4fc4642334ce13c7540b287e4683c357cf01d 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Mozilla\Firefox\Profiles\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\NSFhQ9iIXeHn.mp3 - Access
C:\Users\aETAdzjz\AppData\Roaming\NSFhQ9iIXeHn.mp3.CRAB MD5: 8e6d3b4010e0810bb91c2b052581c243
SHA1: d127861427ba85940a3620ff8ebb1e004e4a9d8c
SHA256: a171384dd2280d88e0b39020febff974a6da97e172d3923562f4269803f9fda3 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Pw42a5SXJ U9O6KOx3R.bmp - Access
C:\Users\aETAdzjz\AppData\Roaming\Pw42a5SXJ U9O6KOx3R.bmp.CRAB MD5: 8b2573aa3d420e8d17b8d9814a66cf23
SHA1: 7823e32f4714de7a18dd6f201bc14b73cbc693b8
SHA256: bf798e0302a510bc5782f82aef67412c69fa3efa3f8c408dac59d5d4fc6132fe 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\r3s44pCf_.mp3 - Access
C:\Users\aETAdzjz\AppData\Roaming\r3s44pCf_.mp3.CRAB MD5: cbe4f214abef50398e0a5bee89d25432
SHA1: 1222abb35ce9c15f4f3d762ce3b3ba94d3d93b40
SHA256: 321ec29ceedb53a5c38626c72005a6eaa3ac15c5a556c2e521dcc91b74183411 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\rBQhyJR3.jpg - Access
C:\Users\aETAdzjz\AppData\Roaming\rBQhyJR3.jpg.CRAB MD5: 5444e09c3cfcd8f91a52ba80c5a4c72e
SHA1: e5da62f625038fa1b4140b72a2f68b3658efca1f
SHA256: 29e5ea4f2435c55b32746f389ec1c8a9f97b4cccf4a6a8ee439857dbf8b239cb 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\roSFmA.pdf - Access
C:\Users\aETAdzjz\AppData\Roaming\roSFmA.pdf.CRAB MD5: cd946c2a6769bdf5e548ffc5951d1ef5
SHA1: dcdaedc79499a5f36231753d2d7241c47025cdc6
SHA256: 345b984ee483dc9cfd9ce7ba40ddc97ea9e5c5d427463dff8dd1fd82fea7906f 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\Skype\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Skype\RootTools\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\AppData\Roaming\Skype\RootTools\roottools.conf - Access
C:\Users\aETAdzjz\AppData\Roaming\Skype\RootTools\roottools.conf.CRAB MD5: 6b866cad1de6cd473bf6678f63aa13b7
SHA1: ecb36d9de47e2bd398a0aa4220b23245d3f7d9db
SHA256: 801c17f85907eac9a93a9e65eeb6756c9d5b1231f681cfd8ad595522acc8453e 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\SWbc6Q1IO.flv - Access
C:\Users\aETAdzjz\AppData\Roaming\SWbc6Q1IO.flv.CRAB MD5: c6ad3e4f40818e634ab391c4f3fca06d
SHA1: 8a34e14f1496d57d4870b5c8766638c14d0e177d
SHA256: dd0ba3f551bd7f3e8de53c8af17ef54ab121d56e6c301343026a0c25af6e05a8 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\tkorYgrKn29MmVpBaV2.bmp - Access
C:\Users\aETAdzjz\AppData\Roaming\tkorYgrKn29MmVpBaV2.bmp.CRAB MD5: 93abaa298d193f885236ccea53668ae5
SHA1: 65e3b2763a7271b35d2c7452a46cd84cf9b7eb51
SHA256: 1a1d74e58f263928e5883f030b909add1550dacb28a884319d5bd640a535d6c8 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\UN55ONd.m4a - Access
C:\Users\aETAdzjz\AppData\Roaming\UN55ONd.m4a.CRAB MD5: dc7056f8a183ea849f80c53b22d8eb15
SHA1: b9c145545219406b9000cca9f16509a5d3a652ee
SHA256: a28b03e260996b4eff2452ad7f7c43637817648c4bf9b3226a8bebce9e4893c8 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\vBbT 2q.mp4 - Access
C:\Users\aETAdzjz\AppData\Roaming\vBbT 2q.mp4.CRAB MD5: e9fc063ddcad0e00e43568c454e4ff4c
SHA1: cb229bfd2f703430ad765b9e20f179396f6cbd4c
SHA256: 263fe3de102991774e4b23f478abe82700e0aeeebde1cbccf7d43a218268d072 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\vIqn--G5ozdMHmYENa0.wav - Access
C:\Users\aETAdzjz\AppData\Roaming\vIqn--G5ozdMHmYENa0.wav.CRAB MD5: d39f691cbc099270e6aa374fed5dd04e
SHA1: c6e8996b5e339e94561393feee363345a413e33c
SHA256: 6929db13934732b62189e0341758976c14de56deea679e10f5abed2a58d3b905 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\wUajFWIllnG.gif - Access
C:\Users\aETAdzjz\AppData\Roaming\wUajFWIllnG.gif.CRAB MD5: 31183743c595e8dd2ff329e40d7f5170
SHA1: cb4e04b1b947ff1fdd2a61a982527ddfe99444dd
SHA256: 22bee3ea807cc400ab89839e36141a3eaa3056c080b969d872ad8fc1b283e49e 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\X0HvEof5UK.mkv - Access
C:\Users\aETAdzjz\AppData\Roaming\X0HvEof5UK.mkv.CRAB MD5: d2844178b431d14adb8c7e40419d28e4
SHA1: b2a75f06d39ced688581e7c65747a70027a3ebaa
SHA256: dfbb291e244d1da71f5fd4aa330d5c6cde726986a64773a9c08966ba2d2a6e13 		Access, Read, Write
C:\Users\aETAdzjz\AppData\Roaming\x2LPreezieSLNIenNtQP.mp3 - Access
C:\Users\aETAdzjz\AppData\Roaming\x2LPreezieSLNIenNtQP.mp3.CRAB MD5: dc9b5ed3c64227ef09f41d15bef128e1
SHA1: c126579fc745fa5ddbf4842a935ae1e04afb215f
SHA256: 6e80504136596ecac2d6f8be7fc8fe624e73015e9e1ae854c9d29b2540b8029f 		Access, Read, Write
C:\Users\aETAdzjz\Application Data\\CRAB-DECRYPT.txt - Access
C:\Users\aETAdzjz\Contacts\Aclviho ASldjfl.contact - Access
C:\Users\aETAdzjz\Contacts\Aclviho ASldjfl.contact.CRAB MD5: b64a12cb990e06aee6981646b3dfdf62
SHA1: e777f9840d845f2f2d11517e01ad38b844c986de
SHA256: 735be089b446df63485f9498bf79be1a6a2b7ea2b973a223912df7ce8dc4a112 		Access, Read, Write
C:\Users\aETAdzjz\Contacts\Administrator.contact - Access
C:\Users\aETAdzjz\Contacts\Administrator.contact.CRAB MD5: 24d3b7cbd50cbc486e0c4b5539a40e39
SHA1: f0a7216ba55c56d100348e75a6bdb9b9f80c4c3b
SHA256: 88fe1a68c2075fcf469490518b9eaa1568ea9752c1c98089ed9a9860b8c94b25 		Access, Read, Write
C:\Users\aETAdzjz\Contacts\asdlfk poopvy.contact - Access
C:\Users\aETAdzjz\Contacts\asdlfk poopvy.contact.CRAB MD5: 8154eb0c7bce54937a82fe3ab06081de
SHA1: 270123cdbe442e4950b7134a4aac30c8e9c870fb
SHA256: 905bf9aa27407f7a2fc6f5f5a7f47859338c372c4a0b73432cfca7c68564ee59 		Access, Read, Write
C:\Users\aETAdzjz\Contacts\chucu jadnvk.contact - Access
C:\Users\aETAdzjz\Contacts\chucu jadnvk.contact.CRAB MD5: 77cc746eb5b343e0289fad83acc09352
SHA1: c79f60e76e431fd804224b97e1cae101dab367da
SHA256: 7486541f33b66467058123dd7b1016e9e5c66d78dba440a8a00a81f9b08a1adf 		Access, Read, Write
C:\Users\aETAdzjz\Contacts\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Contacts\lulcit amkdfe.contact - Access
C:\Users\aETAdzjz\Contacts\lulcit amkdfe.contact.CRAB MD5: 61ddd807436e4ea1b5f2154761225a25
SHA1: aae491236276ce039caec4b3bb43fac85251b60e
SHA256: c5466723cee3b58a3a6d0e4fec9b1cc6f0a2b13f5003145dca2aef66169b7e93 		Access, Read, Write
C:\Users\aETAdzjz\Contacts\sikvnb huvuib.contact - Access
C:\Users\aETAdzjz\Contacts\sikvnb huvuib.contact.CRAB MD5: f0358b15690d3e17153002c832d2ec8b
SHA1: 79c66bc43a0e9f190bcc0e3891becb590bf1eee1
SHA256: ad3ed57b33d1fff2b4a047a132e0b70510e05faa80627b37b88a29dabfda440e 		Access, Read, Write
C:\Users\aETAdzjz\Cookies\\CRAB-DECRYPT.txt - Access, Write
C:\Users\aETAdzjz\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Desktop - Access
C:\Users\aETAdzjz\Desktop\0 qHY_Nlv5mWlmnwfk.xls - Access
C:\Users\aETAdzjz\Desktop\0 qHY_Nlv5mWlmnwfk.xls.CRAB MD5: b24908bbab826c746bf39ec800aef396
SHA1: 18b6ea1d522f49b379f595c5414b6bea32241912
SHA256: 71454ff1fcc48627122e5d64ca60dfe814d8ad262d771ae374c4015d974268df 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\15VUJ2J8J6w-Cnb1EbP.mp3 - Access
C:\Users\aETAdzjz\Desktop\15VUJ2J8J6w-Cnb1EbP.mp3.CRAB MD5: aae7aa4acf9df93cf80e1034d899b3ad
SHA1: 59c14396b3e0560dd898abaf821fce155126145c
SHA256: a8373474a2921d5add3dce1aeed6fcd7048a544767c944aef67394a83b321b8d 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\27DerrKPNs9jB23vNKz7.mp4 - Access
C:\Users\aETAdzjz\Desktop\27DerrKPNs9jB23vNKz7.mp4.CRAB MD5: 7b7445abaedea5f30226e468d9210a85
SHA1: 00b94628cad9f2daece07badb28999f9fc6d69bc
SHA256: cc1ea10c233f5e59f422496797207cdc5183450558d42835a98f6435a5b1ff10 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\3gmBUqZ\09zJVaNR1zfb2CBf3lT.mp3 - Access
C:\Users\aETAdzjz\Desktop\3gmBUqZ\09zJVaNR1zfb2CBf3lT.mp3.CRAB MD5: c655d008eaf134df6d3b672d08106d6f
SHA1: 3252ac1389c2afa3cedc62a7e5c83507da4612ff
SHA256: f5b4be0ff23ec565c698d11cda94a4f5c87f556279c3b84afe3ed026507510f6 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\3gmBUqZ\0mlmZ.png - Access
C:\Users\aETAdzjz\Desktop\3gmBUqZ\0mlmZ.png.CRAB MD5: fa0a78f0c5211d802e0c15853103efc6
SHA1: dfa187e9e377b83728c4e903a2cab4607d9aa9ce
SHA256: 39892c20fe05a5c2b19875c860c769a1d45481f7a9262d3b3e16e658739e23e9 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\3gmBUqZ\8as9KAmNf8.doc - Access
C:\Users\aETAdzjz\Desktop\3gmBUqZ\8as9KAmNf8.doc.CRAB MD5: b2f3d11d8847954c84f438451b1e1052
SHA1: 8b529595559afebd1a7974dabff82ad8b87055e1
SHA256: a592d7b0588ce1f27407fb1599f06ac29321f81c4ca99fc9f8c14302da9ab3f8 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\3gmBUqZ\cGTCfddqsVxjVpe4.avi - Access
C:\Users\aETAdzjz\Desktop\3gmBUqZ\cGTCfddqsVxjVpe4.avi.CRAB MD5: b54cb196abde24ab8260b8660fee4818
SHA1: e8970b19081c2cc340bfd8e1bb58211a892977cf
SHA256: fb02eda361520b4f9e57660f0be54ca13971a819db33adae19f4e0fd3248a4df 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\3gmBUqZ\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Desktop\3gmBUqZ\DdP9cJ5.m4a - Access
C:\Users\aETAdzjz\Desktop\3gmBUqZ\DdP9cJ5.m4a.CRAB MD5: a0ea03e9bca60397322d5e7fbfc62338
SHA1: 8d249a433e07d7cc8bee1dec060176c633168483
SHA256: f1e2a40caf4294b472ff43a1c1cb1bb31898cd7513cd18b4387b0c7b591f93ff 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\3gmBUqZ\QXEqEsC.pps - Access
C:\Users\aETAdzjz\Desktop\3gmBUqZ\QXEqEsC.pps.CRAB MD5: fe635b513c1e3b73ab1d4155cc159047
SHA1: 9de839e9e68d23d8f6b77827ec5e74c5797c7de2
SHA256: 88b5272024d0343fd487ae47b385b306a2875843f9633910fd54f0e0a3031888 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\3gmBUqZ\vF70se qibaaPx1-JT2Q.ods - Access
C:\Users\aETAdzjz\Desktop\3gmBUqZ\vF70se qibaaPx1-JT2Q.ods.CRAB MD5: ac72a05bbd49c6a4cae6fe72c8ba8f05
SHA1: 81c813ccc41aeca2a7e83ccfbf573808f68b08ff
SHA256: 61eb02849e84d4886ef519a92ea635ac4785e8f609673874671c4275e62b043a 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\3gmBUqZ\vjdN5E_dk0ZovtjC6sjY.mp4 - Access
C:\Users\aETAdzjz\Desktop\3gmBUqZ\vjdN5E_dk0ZovtjC6sjY.mp4.CRAB MD5: 1071910234d513f9447593316c98ba26
SHA1: 615fe1aad4c6d1935c07dea39abd5739f8e455be
SHA256: d13a39421af9e492de39153d3c8d8d34244319752057db8c0493811b29c52e4f 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\3gmBUqZ\WAZZu-TK4W.ods - Access
C:\Users\aETAdzjz\Desktop\3gmBUqZ\WAZZu-TK4W.ods.CRAB MD5: 1c44eee0abdedfcc415aa5e19f31dcef
SHA1: 50bf192af6caeacf2fb646859a5712f1be624a52
SHA256: 9e19eb5cc806142fd8fdfd6fd4f310734a3091c5ed082f012bdff86f50c5d4c8 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\3gmBUqZ\Wx7yoOA.csv - Access
C:\Users\aETAdzjz\Desktop\3gmBUqZ\Wx7yoOA.csv.CRAB MD5: c2a25a79bc945f10d6ae77fff0a6e79a
SHA1: 7843e18d3ac5f558a42380f3fdf4f8a7f8f234e5
SHA256: 8e7be92bdfaf60aa775b20ba4c2f5d56c3e7ea62234964f4c3661e0b99b8b6f3 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\47o4F4CdDE.wav - Access
C:\Users\aETAdzjz\Desktop\47o4F4CdDE.wav.CRAB MD5: b9210cb28426e1eccb24acce6463ec9a
SHA1: e2a9647dfa89f8f8a45e6487d74859e14e90a33c
SHA256: 1059f735a34cfa0a128fed5f68668b079b404da59fb13ba11a77da60d8e4ee9f 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\4aql4ldUED2Cbud25Wa.swf - Access
C:\Users\aETAdzjz\Desktop\4aql4ldUED2Cbud25Wa.swf.CRAB MD5: aa9a2f3b84f36eaafabe234058da86b9
SHA1: 3f9463aa8fb8cb0a5ca2e7809cd48e73ab4eff9e
SHA256: 228b896c5a91bf20b7e38cdf7c1377cea703aa243943055f30e2ba92689f4ee8 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\8e Gwl1ijXsy6enrslW6.jpg - Access
C:\Users\aETAdzjz\Desktop\8e Gwl1ijXsy6enrslW6.jpg.CRAB MD5: 0056afda2be82ae472bc48211c0423d6
SHA1: cdc74c6d6b223c95dd1bddab1fbbfdb1dedb8fa3
SHA256: 24ba682dafc26f013a4329b5d73e837e414931c23dabc85743c780f9bfd6789b 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\8XmmzAJI.docx - Access
C:\Users\aETAdzjz\Desktop\8XmmzAJI.docx.CRAB MD5: 8b04c0dcceb55c3d41df047c78b905e9
SHA1: d9c03783d4575200d07b807b9a8df1abd3702e68
SHA256: bd3923c235e2f45be6c58d2429301175b4f271c6ed71f76f89671209d000a9a6 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\a9QXFAaL3.gif - Access
C:\Users\aETAdzjz\Desktop\a9QXFAaL3.gif.CRAB MD5: 74d07a6d76425fde72f30d6b8ee89c26
SHA1: 0db53e484e4cf7b8f34a30668be772987fd802f1
SHA256: 2e91d37d2575120834c01a7534cb4f77efbe22797b670ed2a9b081e15c9135b8 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\ClusgvGlc1lL5.swf - Access
C:\Users\aETAdzjz\Desktop\ClusgvGlc1lL5.swf.CRAB MD5: d0e0bc07438e3b65f51f7514c6c3d917
SHA1: 6ed000f9cb29b23bc613effaed569d9206d9a7c0
SHA256: 98575799930bd07c2f250f9519d48537fe5ed876f5000cb38abbce24757ef81f 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\cRVm1Z.wav - Access
C:\Users\aETAdzjz\Desktop\cRVm1Z.wav.CRAB MD5: 4be84c231543eaef46141be09aae4dc2
SHA1: 86865b63c497dde0c0a7167c8fb72c298ba5aaa5
SHA256: 05a4d81718d928282405c798d86335db4e1675afe2f650c2ec06d1acbf0c0fd6 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\Faith's Resume.doc - Access
C:\Users\aETAdzjz\Desktop\Faith's Resume.doc.CRAB MD5: d937a8edd264c1b4c376c29a46585998
SHA1: c57d57800cc3605aaff1872cbb6da980deb704e9
SHA256: 36a710669698b5266a73912815b46ef4eaa4d059573478f4793b1ba6e3880fa6 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\H KDL4SFE WsVKeHW.pptx - Access
C:\Users\aETAdzjz\Desktop\H KDL4SFE WsVKeHW.pptx.CRAB MD5: effc6421054d6eeda7ee15fcc72e08d3
SHA1: c643be8546fc76ca4c24940aed31aa7c23d0c33a
SHA256: 0e0837d4ba44923038a89b5a59c888e45a79619c7df767abc3567fed7b76f1ba 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\HUyw.jpg - Access
C:\Users\aETAdzjz\Desktop\HUyw.jpg.CRAB MD5: def218fe767c73a991a9e1d183a994a0
SHA1: 6b14c04c78d6e54cc9407c0d100062b362868502
SHA256: f6b55b23ced3700054bd2702550ecb22668c4ee5c8bebdeedc832d63731bf9c4 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\hWqyog.bmp - Access
C:\Users\aETAdzjz\Desktop\hWqyog.bmp.CRAB MD5: 275b85982a8371f52aeed3acf81edf29
SHA1: f087795777342001cc7603d9fd65f5f57a73e8c7
SHA256: 5fcfcbdbfaebe05d6bf901b1a1883b62574cd53c353f0c96f237d0be9a478a90 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\Iy0tiZ9ccrf.rtf - Access
C:\Users\aETAdzjz\Desktop\Iy0tiZ9ccrf.rtf.CRAB MD5: 3eb3215eb50fb5ce60ba8ae98b844e4f
SHA1: 84c1fa422f1927d256ae35db0303b7ceba1a9d5c
SHA256: 723cdde754d8aed9a9b74945e253f34d75ba77172184ee18ffb3593a6b879c73 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\JKp2WTDmm9r7XZW.wav - Access
C:\Users\aETAdzjz\Desktop\JKp2WTDmm9r7XZW.wav.CRAB MD5: 03f5404a5433acc3e3693d1ddcbe81bd
SHA1: fdcbab530f3d0a1f59e05ce93346036384dc5538
SHA256: 52f5fec63a00a430c0f8a5c92aaa2ce216133f02378f14006cbcedf6d27a8990 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\kjQtfOM.m4a - Access
C:\Users\aETAdzjz\Desktop\kjQtfOM.m4a.CRAB MD5: 06752c80c5d1c53de6df433a84b4c106
SHA1: 7cd1319e9c02499ef57584e1624e0fdb92e63f4a
SHA256: 685a865e677aabda7b2dd02b86a8859287270f7d8101bfa084d8a0a18f0f08ca 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\Leh88BDLon-do C.mkv - Access
C:\Users\aETAdzjz\Desktop\Leh88BDLon-do C.mkv.CRAB MD5: a61f31da3c43ac85b6fb41a86d29b7af
SHA1: c71d69d892e00ab9274e288fd6514467215b1bfb
SHA256: c0fa0cc631c17ce6e88dab7cf666055130c1b34ddebc411804aaccdc19ba6d2b 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\lFUt2WproW6FnBB_f.mkv - Access
C:\Users\aETAdzjz\Desktop\lFUt2WproW6FnBB_f.mkv.CRAB MD5: fe0713232399238d0f95fdfaefb14cc8
SHA1: f67deff3ef51afd1d2bb06ba9b6ef9f67170891b
SHA256: 29142cec7a15fd9349206f99e5972e466b0f8c92543272c882ed19bb95a885db 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\lWp8lOD3pxl-seSu.bmp - Access
C:\Users\aETAdzjz\Desktop\lWp8lOD3pxl-seSu.bmp.CRAB MD5: 34790491c271a856d3fcc143d49c0968
SHA1: 0574506e26fe057f656dc09aa0a23ed054468aec
SHA256: 85e12bb80be26a25fccff34ff5d91977fdfea2725ae863516adec3a6337d1f46 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\Ma7WdSyO.jpg - Access
C:\Users\aETAdzjz\Desktop\Ma7WdSyO.jpg.CRAB MD5: fc706d7c9d1fd7df3a039bf89e7ac428
SHA1: d0d419dc6e4f3a2af15f6199a6df96dbc6fd5e19
SHA256: 134129ab44cfac0ab1d712ee648f29b865c708e09ddf1a534a5b21f670fdc628 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\NdQ1.mp3 - Access
C:\Users\aETAdzjz\Desktop\NdQ1.mp3.CRAB MD5: d00c64a3415ba4cd7075c552edbf9671
SHA1: c08550ed2ba136f18f882c2a79566530d27ecbf0
SHA256: d60b89ac440cd16359234152231970999f3747f106836dab60edc2ef2b87d30e 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\nut1i1ktQUnj9W.bmp - Access
C:\Users\aETAdzjz\Desktop\nut1i1ktQUnj9W.bmp.CRAB MD5: 3c4ab728865b42c0cad349bdd5653a81
SHA1: ebac0b72de6d5ddcc4bdb312c76ca5f851a2095a
SHA256: e434d05a05362d87c887f7bacaa2b8874e9e394f68681f5109fdfe398f8f2ec0 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\ogER6FXCUX.ods - Access
C:\Users\aETAdzjz\Desktop\ogER6FXCUX.ods.CRAB MD5: 455d159e19d19613ae1ed5c7bb6b5eed
SHA1: fac3ac498c0eed9295532c2746052a971757e5de
SHA256: dcc855eef6c30c94999d249da9d112f7c8407830283c3648afd580bc498ff2e2 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\PM rTSz-13xa39Eq0-.ppt - Access
C:\Users\aETAdzjz\Desktop\PM rTSz-13xa39Eq0-.ppt.CRAB MD5: 4871c499a87674e7f478dd899fc4dd1a
SHA1: ff8dea7d9b6aa0f3fe904909d4806259979da99c
SHA256: a902046ade20353b08648d76e4f7e126afaecad33b83d7f5475d5d685d00b430 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\RUCAo.pdf - Access
C:\Users\aETAdzjz\Desktop\RUCAo.pdf.CRAB MD5: f8d2ab45c7e121d24b4be06f5af72613
SHA1: c82b865329eb8e6dd66b9abadd3d22f9ef2b4f5b
SHA256: 549c5ab6e9dc0c29123f34479544c3aad0300bd082d86b2912f00e407ebd8864 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\Rwm1uQHEibi.mp3 - Access
C:\Users\aETAdzjz\Desktop\Rwm1uQHEibi.mp3.CRAB MD5: 38057c6b5a2d97c24fd769fab040d841
SHA1: 377b22a245ecd39ad45be6eb0e5ad71238ab6281
SHA256: d62d19c0f97089d4ae24a9ada310097c382ba3261b3041e6322570834076b902 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\sQ7AexViQBLV8G5GOaO.mp4 - Access
C:\Users\aETAdzjz\Desktop\sQ7AexViQBLV8G5GOaO.mp4.CRAB MD5: b0c849f1334d61650973561a67103d69
SHA1: 38ada66fdfbd3d26ad0e090f03fd4d225cd7aa06
SHA256: b228f080e29dfb5f680381d553924327f3a1ca648fff64128cd829f69504598b 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\UanUhGdjox8V9.bmp - Access
C:\Users\aETAdzjz\Desktop\UanUhGdjox8V9.bmp.CRAB MD5: c41afe657c15debb488d5632687f3e6c
SHA1: 7efbfb59329cbf0d6336256c4b2b93145e4a341c
SHA256: b1fcc8a760ce8e6508d08d3bcc05e829f186936b97ec23c5d5334d870b6473ff 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\uofOffo7v1UY8AnYLle.xlsx - Access
C:\Users\aETAdzjz\Desktop\uofOffo7v1UY8AnYLle.xlsx.CRAB MD5: 2d40a8a82fa1df660212ce3f1921c4de
SHA1: c9fc9c1e0a433a75611aa5c9e7d5eed9c1814e57
SHA256: 07b47c608443b03668070a1ac1f75781fc92cbe346fce354789d88c4e3b6f631 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\vjakovQAGHVQXmlp.mp4 - Access
C:\Users\aETAdzjz\Desktop\vjakovQAGHVQXmlp.mp4.CRAB MD5: 1808aac201e43c299e95b32b3dcb10f7
SHA1: de9d4b300b120a5132c3e553116984b825800a05
SHA256: d7d46956313bfeea824d149df1d6f6d1adebee851b99287f880d6f5cc3a7dbb7 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\Y1vvxf34.flv - Access
C:\Users\aETAdzjz\Desktop\Y1vvxf34.flv.CRAB MD5: 3cc9757ff4e689b212ef61ee1ff4dcd1
SHA1: e79fc2b5a27eec9f7093c64dc9917efad23521c9
SHA256: cc83ed205ec6b1d2cacc054e47e57c6948877719344dab0a4345772df6916a80 		Access, Read, Write
C:\Users\aETAdzjz\Desktop\~$ith's Resume.doc - Access
C:\Users\aETAdzjz\Desktop\~$ith's Resume.doc.CRAB MD5: 221651834dae55e982ef683c92b6796d
SHA1: 21592060c69d1c7b02877a8c1f84135eeb609c93
SHA256: 7f5dccbba47b08c309dea03e52f0bfa4bb3cb982a46281fcbfeec92f453f63e5 		Access, Read, Write
C:\Users\aETAdzjz\Documents\44GR.docx - Access
C:\Users\aETAdzjz\Documents\44GR.docx.CRAB MD5: d1693945765781e33aaa6729d846ddbb
SHA1: c829b28d5cd9e9eb55adebd3f598cf9bcc76a2b6
SHA256: 468e0f31d66d4ad73b2e72a1253fb9bbf277364301a4331b86b777e03c04b16d 		Access, Read, Write
C:\Users\aETAdzjz\Documents\4pk5xz3if\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Documents\4pk5xz3if\gWwFmg32vMDYLOCqtT.xls - Access
C:\Users\aETAdzjz\Documents\4pk5xz3if\gWwFmg32vMDYLOCqtT.xls.CRAB MD5: 302a079b59a432e47172e9ccd64d04c1
SHA1: 2eb5c65c780f2a9bd084ce576bfcdc6b915955c9
SHA256: a0591da827e2042e7bc5e0d08b83660c1a7296dea2e619f5ece0db967de71bc6 		Access, Read, Write
C:\Users\aETAdzjz\Documents\4pk5xz3if\INjDoHC.docx - Access
C:\Users\aETAdzjz\Documents\4pk5xz3if\INjDoHC.docx.CRAB MD5: a8f8182a7621670103bc121132d725a8
SHA1: 2e1a60cfdd7291b4f1e6950354ba3e48a0d5a62b
SHA256: 189f1a79ff35d2804321fce3249e27c1c131ce243bd1707cd9b67597eaa8b3b0 		Access, Read, Write
C:\Users\aETAdzjz\Documents\4pk5xz3if\iVW0RGHlicG Hzx0\BLyORJetQHJ.rtf - Access
C:\Users\aETAdzjz\Documents\4pk5xz3if\iVW0RGHlicG Hzx0\BLyORJetQHJ.rtf.CRAB MD5: ee64aa9d52e0bf2e56c5be4e55f33e1f
SHA1: fdcf4aefa5b186d76cd6916e05de81d5da7873b6
SHA256: 56b1be6a58412988cfa2d751d60c4f637edc12fb3e88e5f9d5c3a1cd1f21a9b4 		Access, Read, Write
C:\Users\aETAdzjz\Documents\4pk5xz3if\iVW0RGHlicG Hzx0\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Documents\4pk5xz3if\iVW0RGHlicG Hzx0\mWoGexJo9-2Z_pBz8Or8.docx - Access
C:\Users\aETAdzjz\Documents\4pk5xz3if\iVW0RGHlicG Hzx0\mWoGexJo9-2Z_pBz8Or8.docx.CRAB MD5: d76002084b03bd3d893db970f6733e87
SHA1: 11d988f5596aa9a7f90016ca6cd9048717e5a566
SHA256: 2e343f9487b2ca5b91e062e04192affd47f42b6ef94301b22e6c9894073d32cf 		Access, Read, Write
C:\Users\aETAdzjz\Documents\4pk5xz3if\iVW0RGHlicG Hzx0\v4uE.xlsx - Access
C:\Users\aETAdzjz\Documents\4pk5xz3if\iVW0RGHlicG Hzx0\v4uE.xlsx.CRAB MD5: a5a15d0f6c2f5507d14f8b31c6eb80bf
SHA1: 6d4a6a738c58e7f94cec9528265f89702069ff5c
SHA256: d3ac20a878d741b4a5ca47ff198c4456ddb56787610f0146aebe54909c0e3419 		Access, Read, Write
C:\Users\aETAdzjz\Documents\4pk5xz3if\iVW0RGHlicG Hzx0\VMN5U4fb1QVLtB8jHe.xls - Access
C:\Users\aETAdzjz\Documents\4pk5xz3if\iVW0RGHlicG Hzx0\VMN5U4fb1QVLtB8jHe.xls.CRAB MD5: 6e4df0ccbf9e1b8411dd73647c24a73a
SHA1: add6ecc989ba006e6636c017392decde24cf00bf
SHA256: f3325656314bd67f93c118a02e8c9ba39562924185bd9bdccb457e4845a26a21 		Access, Read, Write
C:\Users\aETAdzjz\Documents\4pk5xz3if\iVW0RGHlicG Hzx0\XMqU_G I4xv.odt - Access
C:\Users\aETAdzjz\Documents\4pk5xz3if\iVW0RGHlicG Hzx0\XMqU_G I4xv.odt.CRAB MD5: 3d45ea864ae7de4f4628e2e7bfcc6109
SHA1: 8118e9b3e429d3c2960434ca066e71cde389d2ba
SHA256: cc38db304ba16c7ec056363119a00f389e73c5d4d5c2a1e7dd2d5c5f53ee0d55 		Access, Read, Write
C:\Users\aETAdzjz\Documents\80PV1WnPRT.xlsx - Access
C:\Users\aETAdzjz\Documents\80PV1WnPRT.xlsx.CRAB MD5: f627856b408edfe1743207751ca48b45
SHA1: 3fd7f3c148410b89978372287bf33fa9498b3e18
SHA256: 76462215c7d27ee273467115e7296a7800cc4ac073bea264ddbf14dfd36c22cc 		Access, Read, Write
C:\Users\aETAdzjz\Documents\8PTX2MRVZzuA7nFt.docx - Access
C:\Users\aETAdzjz\Documents\8PTX2MRVZzuA7nFt.docx.CRAB MD5: e0e7489cb4338c9b886d99323be74d81
SHA1: c643534845b53ccfbcdec6fb3d9bc9adbc1abd48
SHA256: cbcec9fe75671dc7c8c40fb2a6856f4aab96738ec8c9b4acc163fd9332180dd5 		Access, Read, Write
C:\Users\aETAdzjz\Documents\_ggaXuAxLfTisBRFxLtF.pptx - Access
C:\Users\aETAdzjz\Documents\_ggaXuAxLfTisBRFxLtF.pptx.CRAB MD5: 7d7d75a4c3e3d514248da4fc4bbd7397
SHA1: a0da292f5ce84862664a82f7c74fddfa0cfeb7fc
SHA256: ee0ab14f1862f68b3b9db5f6d5e3f0fdedcb09b3c954d3037f336c4d9634dd31 		Access, Read, Write
C:\Users\aETAdzjz\Documents\A-ZHv_mclYOiH-.xlsx - Access
C:\Users\aETAdzjz\Documents\A-ZHv_mclYOiH-.xlsx.CRAB MD5: df7ebc6c6efc03095006c2db4d71321e
SHA1: 3e4fe829e39e4514471264acbeb3b7d191723f0d
SHA256: a22ec221af3017f6423fba97bb08ef1fd9dccd55b71bb54ccb0d564a66c6dcdd 		Access, Read, Write
C:\Users\aETAdzjz\Documents\a_so8w9WcMWyogEm_.docx - Access
C:\Users\aETAdzjz\Documents\a_so8w9WcMWyogEm_.docx.CRAB MD5: e158aec14ee09de9e90d90b3448ea115
SHA1: 3f6419c05f26094e856a364a19343c36c3631ea1
SHA256: 1e47411ee72dc5a657523ef0241af5a85ddbf15e11c5908b92b48210cef984b6 		Access, Read, Write
C:\Users\aETAdzjz\Documents\ACJTZkU4.xlsx - Access
C:\Users\aETAdzjz\Documents\ACJTZkU4.xlsx.CRAB MD5: d950bcbedda4e9e4823931d693fcc04a
SHA1: 85e0c1f2f819d4a2abe0d0bbfbd66faccf02f360
SHA256: 9022f07f3c2740ff0331e86dc3a87516630d5ebcbcc338e675ad153df8ad4326 		Access, Read, Write
C:\Users\aETAdzjz\Documents\AxPhQ0mF_FKp\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Documents\AxPhQ0mF_FKp\eepCDMNCegfRq.docx - Access
C:\Users\aETAdzjz\Documents\AxPhQ0mF_FKp\eepCDMNCegfRq.docx.CRAB MD5: 06f30c7b848c12ab4a0806bd4b879688
SHA1: 48d7ef3bd7f50b6a9bee9fe4f7ae0f388fb7e40d
SHA256: 23bf705411241c9378301f7609f4622a8bb8d1146a200ccbd6923b97ff5df5db 		Access, Read, Write
C:\Users\aETAdzjz\Documents\AxPhQ0mF_FKp\Hyv lW y9YnWIlKLOT.rtf - Access
C:\Users\aETAdzjz\Documents\AxPhQ0mF_FKp\Hyv lW y9YnWIlKLOT.rtf.CRAB MD5: e97b68ff018437c608f9e3bc986842c1
SHA1: 9c45b3460850f7d7266e43a175e068cb0ba98fc5
SHA256: b26ec3ae242a0e1519c2363ff67819ade4629b94611a9d00656745248fb5f33d 		Access, Read, Write
C:\Users\aETAdzjz\Documents\AxPhQ0mF_FKp\JX 7s6.odt - Access
C:\Users\aETAdzjz\Documents\AxPhQ0mF_FKp\JX 7s6.odt.CRAB MD5: b26e55f904c4a5ccd5fe6a119843d4cc
SHA1: db8699e48c43897fc035a941b7933d250fb2faca
SHA256: 85b7e0a5b18f488fa7b18fd14e917aabe2561060e71fdec0fefa6ce5b02ea7c2 		Access, Read, Write
C:\Users\aETAdzjz\Documents\AxPhQ0mF_FKp\zvJ2.xls - Access
C:\Users\aETAdzjz\Documents\AxPhQ0mF_FKp\zvJ2.xls.CRAB MD5: af3a187478b57510a1072edc9479ba09
SHA1: c8fa2c877bfd8419e822c1160b4c4393c210b86a
SHA256: 10f7fbcb77d4662c51f45b39a7f4035a08720aaa4654c2311c0ec8d5f67873cc 		Access, Read, Write
C:\Users\aETAdzjz\Documents\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Documents\cXQuMvYHoIonw_XWlgg.pptx - Access
C:\Users\aETAdzjz\Documents\cXQuMvYHoIonw_XWlgg.pptx.CRAB MD5: fdbb2db2ff3c5d0ed3952cfe7eabc64d
SHA1: e837c0d87acade353939e91a650ee5d782017f53
SHA256: e758453bd885cac39ca6569ae02fc3fe36abfcd5bfef9a8f209d17ea702e08f7 		Access, Read, Write
C:\Users\aETAdzjz\Documents\Database1.accdb - Access
C:\Users\aETAdzjz\Documents\Database1.accdb.CRAB MD5: 8b5336f2c1b7d80abb93f8e09b620fcb
SHA1: ef11faacdc8e333a819eec1d2d122438d99748fc
SHA256: f6a6539ecf724fb3567cd36f8bc6c28fb10d51dd7a460c0af840d4d75236dca9 		Access, Read, Write
C:\Users\aETAdzjz\Documents\DqTEkwy6.pptx - Access
C:\Users\aETAdzjz\Documents\DqTEkwy6.pptx.CRAB MD5: 2c77bacee53361603b653496d39bfa07
SHA1: 30676a45a280c17ae8ce8a60a8f7780e8f76ae5d
SHA256: e575d6e2a672ae9b2660de0d6c87ba53e704a03c39d81922bf6ab3b6b175c162 		Access, Read, Write
C:\Users\aETAdzjz\Documents\e2adFZpo.docx - Access
C:\Users\aETAdzjz\Documents\e2adFZpo.docx.CRAB MD5: d15bcd27ac98e411043bd68197bcfdb2
SHA1: 76c5ceb30f59adef6b8f853d04e055ee1aaea15e
SHA256: fdde3d0a2fd9fd5477d8a3dc10dd74b92d2285a48a5781bd15aba2dfb6fb1c11 		Access, Read, Write
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\4yR20vabDdJWRZkzico.pptx - Access
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\4yR20vabDdJWRZkzico.pptx.CRAB MD5: 590b3e9b1985bdda58dc76fb360891bd
SHA1: 53ac7bbb86e171d31f1343e6b4efcb20458f8bae
SHA256: 2fb6a2329277d877e22e18fd0e1578da7a0e1542b4eec9f9e1c0f1c9a4a6a354 		Access, Read, Write
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\5b6z3w2uOcG.odp - Access
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\5b6z3w2uOcG.odp.CRAB MD5: 59a1f4581bbf98b6e8c26e1047374ce0
SHA1: 6492f41cbe10e98964d4d4507c841b7091d58dbd
SHA256: ab6a354142e580a0ae21d00fe5c6198f8b7c13d542d493f1594e75a82f8a5d3f 		Access, Read, Write
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\8RIA X.pdf - Access
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\8RIA X.pdf.CRAB MD5: ee6a78fc94d1734efeef9b4a36fd9561
SHA1: 1267af7255b3119e3a69f7034abf8b050964a5ca
SHA256: 7e7cf90bd48ba37d384ee6455142a9e8605cbc437e73cc79ff46361777b18932 		Access, Read, Write
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\_fjoUN.odp - Access
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\_fjoUN.odp.CRAB MD5: 1330606ac68efc3f7eef9667360465b3
SHA1: 7ef7c146dfa962d38ea95d19452d2c1703aa1b3e
SHA256: 1ac518e42377c6600abe981a7cafc3107a87091ef609a04431afe02ebea4f132 		Access, Read, Write
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\FV-3Vm.docx - Access
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\FV-3Vm.docx.CRAB MD5: f010eeba66044e1e8be88a65cdb5eff2
SHA1: d1c297686d38a3966995110d801e994762fa4dc2
SHA256: 16561a9098ee62ef2999f962e51a80ae668cf205201ee07df1c39ed8503beeeb 		Access, Read, Write
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\HvbzYTLnTwL.xlsx - Access
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\HvbzYTLnTwL.xlsx.CRAB MD5: 7a4bd5533c553d15228ef864778b6a2c
SHA1: 376d77cb8b6a81bc1bce3bbf5f02203cf47e86f8
SHA256: 9fb49a0df198aafb8cc6a6d9f4a61c0815fdcd143f360d3ab71690030171e06d 		Access, Read, Write
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\I9LH4.docx - Access
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\I9LH4.docx.CRAB MD5: 99c2df2c08f805149d25177576d8e575
SHA1: 91933c5541512a7ee6cf246a9bc38e7f632a81f9
SHA256: a8212b268057172d1ead236e60ad25a879467438ec3fb09e769dd26f8f46f5ea 		Access, Read, Write
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\kbjma4rtGC2A YD7y5.ods - Access
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\kbjma4rtGC2A YD7y5.ods.CRAB MD5: 9af8bdfa7aeec7e21006d5c6d0812900
SHA1: 823b6d8179ebc50cd3c1c57004aef0bab2b79181
SHA256: 7a99a3695efa8516c1a32cedb91615cc344a3f406ffa58abbee68a3ff1fa4b09 		Access, Read, Write
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\MAhHreDGAIwQ_aLB4Jc1.pptx - Access
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\MAhHreDGAIwQ_aLB4Jc1.pptx.CRAB MD5: 5d6e6499f3462861b49ca519426bc826
SHA1: 53793f4241faa901029dd75c514106d4cac44f75
SHA256: 7fa6d818d48ebdee73576017620c04c2db31a42fd9307073054a1eead183f07f 		Access, Read, Write
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\MyJsuxtGTiWeS3uI.doc - Access
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\MyJsuxtGTiWeS3uI.doc.CRAB MD5: 08550e7051e01e10b5b5b8f878d5ff51
SHA1: 82e4c25d7bd299da2b737692e8e28b44fbff74c0
SHA256: c6f8bc9608ceaf5c4513837e406414229678b07a69117cd31c967c54135fdc21 		Access, Read, Write
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\TzYsV5F1v.xlsx - Access
C:\Users\aETAdzjz\Documents\F-Ym27JZWwd_1ngVaiBV\TzYsV5F1v.xlsx.CRAB MD5: 5b79ed9d51b93fc0e605d0f8b109cfe3
SHA1: 6bedd96e6f887d64e02915397b5d6bb473b5ebed
SHA256: a6c916ff57a2028c0658baa8cb70a171787f8a747c43a5a8de61aa306bb18319 		Access, Read, Write
C:\Users\aETAdzjz\Documents\KELJq7.xlsx - Access
C:\Users\aETAdzjz\Documents\KELJq7.xlsx.CRAB MD5: 91b9cf1997279d9149ccb8bf4e43db85
SHA1: fd81c6688a15fa719141c907935fcadf65a69f29
SHA256: b61c354bf90bca1424bb550acabc414a199e2cebd300629186b2a2304bc2be74 		Access, Read, Write
C:\Users\aETAdzjz\Documents\ljTjt6spbhIx.pptx - Access
C:\Users\aETAdzjz\Documents\ljTjt6spbhIx.pptx.CRAB MD5: c5636b8ef8f966ef5a58b859f589dc76
SHA1: c5ce1570b3e0a1688e0b6644e8b22b78c6775ba8
SHA256: 6547f28d6fedb13f9afd1b4212300a9df90d8b0f43b058735a3ebd85662d9f09 		Access, Read, Write
C:\Users\aETAdzjz\Documents\My Music\\CRAB-DECRYPT.txt - Access, Write
C:\Users\aETAdzjz\Documents\My Pictures\\CRAB-DECRYPT.txt - Access, Write
C:\Users\aETAdzjz\Documents\My Shapes\_private\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Documents\My Shapes\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Documents\My Videos\\CRAB-DECRYPT.txt - Access, Write
C:\Users\aETAdzjz\Documents\OKp gzf_GaJL1nn5UHG.xlsx - Access
C:\Users\aETAdzjz\Documents\OKp gzf_GaJL1nn5UHG.xlsx.CRAB MD5: d175d2e80951b8bd5f146c693f2f5f30
SHA1: 0655da2764b6a85174970085e99099dac4742963
SHA256: 5b6efd657bc2122ea42934f213773e6505bc621d0ce0e2dd938bdb7763040e20 		Access, Read, Write
C:\Users\aETAdzjz\Documents\OneNote Notebooks\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Documents\OneNote Notebooks\My Notebook\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2 - Access
C:\Users\aETAdzjz\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2.CRAB MD5: 813e64731c8d48384e306b2bb6e69e72
SHA1: 23db4e6912496f0dc2adfe72b1a56d6626f22919
SHA256: 6a7678e7c15517eb95425d6a6c2b98b9d733102d8e06f32f3862b01c868ea5d8 		Access, Read, Write
C:\Users\aETAdzjz\Documents\OneNote Notebooks\My Notebook\Quick Notes.one - Access
C:\Users\aETAdzjz\Documents\OneNote Notebooks\My Notebook\Quick Notes.one.CRAB MD5: 007c5e7fe9db707e20e8600cf97a2c0c
SHA1: ed2691df710e7c88785a0910ca7ec5f67f9bd085
SHA256: c36b011146717e36c78d9806b5ae561185f9cca5273e155f9b4c3ab38ca7fa45 		Access, Read, Write
C:\Users\aETAdzjz\Documents\Outlook Files\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Documents\Outlook Files\sdjwh@dive.djh.pst - Access
C:\Users\aETAdzjz\Documents\Outlook Files\sdjwh@dive.djh.pst.CRAB MD5: 82c6befda1f3931d825f4e4b11f189e7
SHA1: f54f28db2383c7b2923667b83c58a49c29de4904
SHA256: dac98c5ceff87775ce3a5d0713bda1ed6f62b1de06dfb8d146220699ec2e9b97 		Access, Read, Write
C:\Users\aETAdzjz\Documents\T7oTSrEna0fV.xlsx - Access
C:\Users\aETAdzjz\Documents\T7oTSrEna0fV.xlsx.CRAB MD5: e2e18158c8c358f96cadbedc00998292
SHA1: 10d2f660773cadc3486ec39f79c59bf8fdc12b18
SHA256: 4b63ebbcd6ed9778c04416b416110db16ba4fa5a6d812750e11ecc87121bf82e 		Access, Read, Write
C:\Users\aETAdzjz\Documents\tYADVae4csR\2hZ7Yc7frDgYnrQ8Qhid.odt - Access
C:\Users\aETAdzjz\Documents\tYADVae4csR\2hZ7Yc7frDgYnrQ8Qhid.odt.CRAB MD5: 0bedd5da38ddc8e3396a285ee7b5aa98
SHA1: a7fd020e31b73e60422166ffd3c377c7b47af546
SHA256: 527e131b4f833cf52c86f932b3a314558f3cd12a69d2a030fdafb45efc5c08de 		Access, Read, Write
C:\Users\aETAdzjz\Documents\tYADVae4csR\753thekiOhWOJlf.ppt - Access
C:\Users\aETAdzjz\Documents\tYADVae4csR\753thekiOhWOJlf.ppt.CRAB MD5: 2d503f6a114add546653bf9a3ce4a78e
SHA1: 63546d1e72a96d3a45ea874afe5351d294802485
SHA256: 070ae8718f1678e390fca4248452efebc7459c04e8cebfb35242c19872fa58fc 		Access, Read, Write
C:\Users\aETAdzjz\Documents\tYADVae4csR\cnKgQDkW1PCLqJ.pps - Access
C:\Users\aETAdzjz\Documents\tYADVae4csR\cnKgQDkW1PCLqJ.pps.CRAB MD5: 594b2edf62a33ddbb51cdad8e321e58c
SHA1: 52ddce2dc23e811255840e7ee5c45f8a4e0df49d
SHA256: a932fd48d648ae4c3a3d0e5f874807737d1516b3dfb7ee829795733ebb5bcb24 		Access, Read, Write
C:\Users\aETAdzjz\Documents\tYADVae4csR\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Documents\tYADVae4csR\KPmSm5_Jdwi-FZC\1ZuNwYjAYt0J.xls - Access
C:\Users\aETAdzjz\Documents\tYADVae4csR\KPmSm5_Jdwi-FZC\1ZuNwYjAYt0J.xls.CRAB MD5: 6decf7290620918c0fbdad059a8e229e
SHA1: 2c72622aa8e0b516a54f274a41cb115dc4399d20
SHA256: 6a20bb6c5911ef4e97ca2fa78d90ad41aa05be3f1c0526f19284d00035b7ceb7 		Access, Read, Write
C:\Users\aETAdzjz\Documents\tYADVae4csR\KPmSm5_Jdwi-FZC\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Documents\tYADVae4csR\KPmSm5_Jdwi-FZC\G9RwWlB_houfKOOEj.csv - Access
C:\Users\aETAdzjz\Documents\tYADVae4csR\KPmSm5_Jdwi-FZC\G9RwWlB_houfKOOEj.csv.CRAB MD5: eac6abda86d5f391c180bd1e93eebea6
SHA1: d7c166114e20732e4c253c0a6e58b89058923804
SHA256: e4ac541d7b4f49f59065d4b262b884a708283838836d0726ea4e1168b6dd7ffe 		Access, Read, Write
C:\Users\aETAdzjz\Documents\tYADVae4csR\NN4Je0CyW41lECynI.rtf - Access
C:\Users\aETAdzjz\Documents\tYADVae4csR\NN4Je0CyW41lECynI.rtf.CRAB MD5: 240dd66cbda66adc3c9089c5352eb4ee
SHA1: 3840033f54c9d3cc9e97a19cce3d17de88168663
SHA256: a461c245960c03ea52f66702f58201a71ad46b2bea081b3d252e4c01229e721c 		Access, Read, Write
C:\Users\aETAdzjz\Documents\tYADVae4csR\oI6intpkasC.ppt - Access
C:\Users\aETAdzjz\Documents\tYADVae4csR\oI6intpkasC.ppt.CRAB MD5: 1f3790654f50a4dd366e5a428ab9ae76
SHA1: cd7ff4fa897996d0f4f5cc6c5830a338702faca3
SHA256: 2b70df54e4b8d04753b8410901634b3ff65d11ea8283a69c5c4a320ffdd1c859 		Access, Read, Write
C:\Users\aETAdzjz\Documents\tYADVae4csR\q9 CYQ_JqsosZ.rtf - Access
C:\Users\aETAdzjz\Documents\tYADVae4csR\q9 CYQ_JqsosZ.rtf.CRAB MD5: 0aa8955dfa40b040bbb08e87a671b448
SHA1: 1ea11a986b25a71b41e0c9b2f3c3858a7509d7d6
SHA256: c11dbb9957ee74b62545dd31cc3d2da978aea7de253ad02794c40713aba9ed48 		Access, Read, Write
C:\Users\aETAdzjz\Documents\tYADVae4csR\tAv 7RaMIJGEVS.odp - Access
C:\Users\aETAdzjz\Documents\tYADVae4csR\tAv 7RaMIJGEVS.odp.CRAB MD5: 1b13396d159935e4caf61be32a01ced2
SHA1: 651febec0027c7a92311fbc202ee056059f5846f
SHA256: 7bcf06bf7d287c3354a1b9e3f525cb0664d5b330664cf6f83a8852d64d43d6b8 		Access, Read, Write
C:\Users\aETAdzjz\Documents\UezHo9 hRniypxR.pptx - Access
C:\Users\aETAdzjz\Documents\UezHo9 hRniypxR.pptx.CRAB MD5: 2b8a619ce021ec1ce386f94cadd41448
SHA1: 4ed1337486253c9374c1fac375b86d00bb295368
SHA256: 5d8fdf35858ea9515a89f2fc0180af59426fcd2b1bfc37390dff4f1f2ae3e786 		Access, Read, Write
C:\Users\aETAdzjz\Documents\XEJJuQmq.docx - Access
C:\Users\aETAdzjz\Documents\XEJJuQmq.docx.CRAB MD5: f552b26c9471dc26b90d7a44296354cf
SHA1: f07e3873275cf1531007ab93bea9daa2ac2d10e4
SHA256: 7cc72d76d5cbed7c9ee6b9220ce69ec8457ba54cbdac1a6528dc130520b5d6da 		Access, Read, Write
C:\Users\aETAdzjz\Downloads\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Favorites\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Favorites\Links\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Favorites\Links\Suggested Sites.url - Access
C:\Users\aETAdzjz\Favorites\Links\Suggested Sites.url.CRAB MD5: a13553b0345a6fc93b227a9aa57b61a5
SHA1: 2cfae60429a52930b426c99d5d66045f649a9aad
SHA256: 5a07a5fb8bf872b5dd5ffa55cecc4be6e7c8a078b4c12a58f778eac48ed01fff 		Access, Read, Write
C:\Users\aETAdzjz\Favorites\Links\Web Slice Gallery.url - Access
C:\Users\aETAdzjz\Favorites\Links\Web Slice Gallery.url.CRAB MD5: 3edb60711ed969cb763dd91058c8db2f
SHA1: 217b641660a82fe8294a0aa1725c48be41a580f6
SHA256: d3bd1532f807119b7c2c4df46e2301b4e27bb1b28459aebd0afff0548857f8f8 		Access, Read, Write
C:\Users\aETAdzjz\Favorites\Microsoft Websites\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Favorites\Microsoft Websites\IE Add-on site.url - Access
C:\Users\aETAdzjz\Favorites\Microsoft Websites\IE Add-on site.url.CRAB MD5: cb975501c7235f20f96c117700041391
SHA1: e068dc2e5964b9cda4b116206fec04ecc54b6ae5
SHA256: 103f4e5a115eee1648b955d0b48a74d85ace97c9b4b2c59669dbdfe5ebb59a13 		Access, Read, Write
C:\Users\aETAdzjz\Favorites\Microsoft Websites\IE site on Microsoft.com.url - Access
C:\Users\aETAdzjz\Favorites\Microsoft Websites\IE site on Microsoft.com.url.CRAB MD5: 6c2ab97c94eb68c5b944ef6b3df63a8b
SHA1: 1997ffa1889f88b31ce61e78f02d7c11e4c95f31
SHA256: 800b904b5bc5a09e458cdb13169ebe766992e7a9d0894af267d8d71ffc2f553d 		Access, Read, Write
C:\Users\aETAdzjz\Favorites\Microsoft Websites\Microsoft At Home.url - Access
C:\Users\aETAdzjz\Favorites\Microsoft Websites\Microsoft At Home.url.CRAB MD5: ec6b69ef9c9d336771e50d382f58d4ae
SHA1: 314fc6b5c90c9618821cca401ae585a09f4b8ffa
SHA256: 4753bc8f23bcf8949e1b69aabee951ac41e4e33a56fe66814d8de4a4cc01719e 		Access, Read, Write
C:\Users\aETAdzjz\Favorites\Microsoft Websites\Microsoft At Work.url - Access
C:\Users\aETAdzjz\Favorites\Microsoft Websites\Microsoft At Work.url.CRAB MD5: 9d5b57d0924b22e1ee5cd70a002022da
SHA1: 42cf6d9daa23ec910b98542f88d5d0de20e3cc69
SHA256: 7ea598377a7906b74815918f3d886ca80e2fe9683f1e58f4ab1d911717063d69 		Access, Read, Write
C:\Users\aETAdzjz\Favorites\Microsoft Websites\Microsoft Store.url - Access
C:\Users\aETAdzjz\Favorites\Microsoft Websites\Microsoft Store.url.CRAB MD5: d2b394a27001931f10d15465c9fac47d
SHA1: 9095bcf193cfd87288770099239a5cb81c41de80
SHA256: 7ab914e9764f63cb12aa9acf2d143e6caee610e7936c1b6bcb1fdfd4d889490b 		Access, Read, Write
C:\Users\aETAdzjz\Favorites\MSN Websites\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Favorites\MSN Websites\MSN Autos.url - Access
C:\Users\aETAdzjz\Favorites\MSN Websites\MSN Autos.url.CRAB MD5: fbcc6a581a67b978bc1d75d4425b68c3
SHA1: 0203338d67dd6971f164c19b29a79c8aa66fcfc5
SHA256: bb3feb03bf0bd4f3c87fec155118d4dbd3dd7143320be067efb5430a256f9e54 		Access, Read, Write
C:\Users\aETAdzjz\Favorites\MSN Websites\MSN Entertainment.url - Access
C:\Users\aETAdzjz\Favorites\MSN Websites\MSN Entertainment.url.CRAB MD5: e293d4ffae41328f68f13a07622be01d
SHA1: 1bc4a73b276646a47c413ff2811f3a6c596e6f22
SHA256: ca2b1a320fbbcb000dd918f18f781ec90ed703b7c64f5ec8671192f25ce31da8 		Access, Read, Write
C:\Users\aETAdzjz\Favorites\MSN Websites\MSN Money.url - Access
C:\Users\aETAdzjz\Favorites\MSN Websites\MSN Money.url.CRAB MD5: 972284985ba47a721331f5b10c538210
SHA1: 5c4e71b7c57aefeff3710d989c32c9da14d172b1
SHA256: 2ddb86b7deb4a54dc27cfd14e368aa3c5cbc2a112a2049d332124c1fc8bac638 		Access, Read, Write
C:\Users\aETAdzjz\Favorites\MSN Websites\MSN Sports.url - Access
C:\Users\aETAdzjz\Favorites\MSN Websites\MSN Sports.url.CRAB MD5: a41cbc7ba249c9cb56f252664f55f768
SHA1: d9bbf201b9e6ea9362b05ec16f2c08e3ed16cb47
SHA256: 7347dacf9df0cc255b6c1e32b3debb761efeb14cac9f390563adaa448201d56a 		Access, Read, Write
C:\Users\aETAdzjz\Favorites\MSN Websites\MSN.url - Access
C:\Users\aETAdzjz\Favorites\MSN Websites\MSN.url.CRAB MD5: 52e8fb5481af763ddf90acc04dd6aeef
SHA1: f3011c8daca706222a2b6cf3859a48b4088e58ee
SHA256: 811a604101dbaf264bef891babd04604f3d0974492f33f5016e1e99a9f1360ac 		Access, Read, Write
C:\Users\aETAdzjz\Favorites\MSN Websites\MSNBC News.url - Access
C:\Users\aETAdzjz\Favorites\MSN Websites\MSNBC News.url.CRAB MD5: 148b8b1c9f67cee0e4487eebfd0462d6
SHA1: 8a911250ec164e2f84374e7754521cd12bfd3b88
SHA256: a189fd32b802103636519790f2a4011849a5f32e8c9864d933791208f4adbce8 		Access, Read, Write
C:\Users\aETAdzjz\Favorites\Windows Live\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Favorites\Windows Live\Get Windows Live.url - Access
C:\Users\aETAdzjz\Favorites\Windows Live\Get Windows Live.url.CRAB MD5: 1a4cc8555b6dfa123237b0f85fca158b
SHA1: 3eb06c5e4950a9b05fc0a21dc00b817249e54bf2
SHA256: 3c94e72731dadb7af82550b089ab0132c7ce2594d8c3cb488df0ecfeae476ac6 		Access, Read, Write
C:\Users\aETAdzjz\Favorites\Windows Live\Windows Live Gallery.url - Access
C:\Users\aETAdzjz\Favorites\Windows Live\Windows Live Gallery.url.CRAB MD5: 1519697b8a3027ce2f134410ef421221
SHA1: 474fa24e14b3ad94173191abe50b44fd2389e229
SHA256: a0cfacc8e26751d6fd1150194b3a5bb2c8cf139efc014357a61b63f46fd9ee19 		Access, Read, Write
C:\Users\aETAdzjz\Favorites\Windows Live\Windows Live Mail.url - Access
C:\Users\aETAdzjz\Favorites\Windows Live\Windows Live Mail.url.CRAB MD5: 7151c0d25b957df39a4a4399f11ee9d9
SHA1: f0e5cbf23c0b36d6566b482b0de648c65bba20dc
SHA256: dd16b632523dce11dc9e30cc76f41eada475a581cab0d11c882407f2b705a91d 		Access, Read, Write
C:\Users\aETAdzjz\Favorites\Windows Live\Windows Live Spaces.url - Access
C:\Users\aETAdzjz\Favorites\Windows Live\Windows Live Spaces.url.CRAB MD5: 5c346482e9d2840c8d0c968f701766a7
SHA1: 8a388004b3b2f68630e5e5844c5757cbc8c5f090
SHA256: 56f3cefd43241f40de49581f3d05f05505f0eb90bfd0fd86dbd07655d15b9cc2 		Access, Read, Write
C:\Users\aETAdzjz\Links\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Music\-hVupXG7m_Cs\5pIhhMtUfboKs.m4a - Access
C:\Users\aETAdzjz\Music\-hVupXG7m_Cs\5pIhhMtUfboKs.m4a.CRAB MD5: 4d92049d53d1fd87fe81a2326fe0140d
SHA1: 3bfd07cc91733a6049b61e008e82303a252906eb
SHA256: 34b84214868aee453bf075dcbac79a149dab979d6c85d22c827e86fbbd21955c 		Access, Read, Write
C:\Users\aETAdzjz\Music\-hVupXG7m_Cs\7L4rVz VFEZCdCh.m4a - Access
C:\Users\aETAdzjz\Music\-hVupXG7m_Cs\7L4rVz VFEZCdCh.m4a.CRAB MD5: 7415a229cda95908a65d4f04d42396b9
SHA1: 9e71dd3a24ffbd6c45cedbc10c89be8d2c602dd6
SHA256: bb2e4158e35dc693b8c604ab0de856b0e9b3682ea301cfe63f8e5709d9902359 		Access, Read, Write
C:\Users\aETAdzjz\Music\-hVupXG7m_Cs\9HiSZ6.m4a - Access
C:\Users\aETAdzjz\Music\-hVupXG7m_Cs\9HiSZ6.m4a.CRAB MD5: 87cf734fa407fd899098cdafa38fb092
SHA1: 82bcb8e23841aee16f09cc2fc219c480ca11d239
SHA256: 09e5e02e53c13955c1b48cfc19817e736a3a8c55aedc32d9bc2ba7a6c876722a 		Access, Read, Write
C:\Users\aETAdzjz\Music\-hVupXG7m_Cs\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Music\-hVupXG7m_Cs\KcgD4jH.m4a - Access
C:\Users\aETAdzjz\Music\-hVupXG7m_Cs\KcgD4jH.m4a.CRAB MD5: 3941d30f2686b4141861663c9fcd3b57
SHA1: 891a480df3c6afa95199286d8f529cb0e9a74cff
SHA256: 6f0a2d53c117c9f878da94fea1d68ec5201d674e4730066abb592ef177be1482 		Access, Read, Write
C:\Users\aETAdzjz\Music\-hVupXG7m_Cs\Nao9bkL6Kqfl8C.mp3 - Access
C:\Users\aETAdzjz\Music\-hVupXG7m_Cs\Nao9bkL6Kqfl8C.mp3.CRAB MD5: 6c5e417653247b92c2eb947db0a20f4c
SHA1: 458c2e1c990e9b7d3ab821d9659ee63ad046f466
SHA256: 4a96f4e5966365703e705662dd52b08d51dd425d04534f39228f71894e1f3e8b 		Access, Read, Write
C:\Users\aETAdzjz\Music\-hVupXG7m_Cs\t3DEnkRAVG.mp3 - Access
C:\Users\aETAdzjz\Music\-hVupXG7m_Cs\t3DEnkRAVG.mp3.CRAB MD5: e14e4f3d19a109fd6507d5be57c1b5b8
SHA1: 97c5065268e11cf6ac5fa48c2e58376f74c56b99
SHA256: 714ce2dde55918447af6f4d71ce21e49a7254a63e8ff8d3a1f12fe08bd0bca9b 		Access, Read, Write
C:\Users\aETAdzjz\Music\_-7GRPn OWSi_zam0nh.m4a - Access
C:\Users\aETAdzjz\Music\_-7GRPn OWSi_zam0nh.m4a.CRAB MD5: 5855eb4731d549c768ea3f7b8d82cab7
SHA1: 284cf0d366fb6878ce49d860c05e22c85e79e593
SHA256: bb3936fb1993e5b77f029297a1f9396b9a9af31daba36e03f3bd84cb87bcae4c 		Access, Read, Write
C:\Users\aETAdzjz\Music\BNPG4.mp3 - Access
C:\Users\aETAdzjz\Music\BNPG4.mp3.CRAB MD5: e14204ab87ad64d10d25a1c5cf8a2a14
SHA1: 76cfbc208703cb7ae67221fbf26025409534164b
SHA256: 84acafb38961d7794ef5b79e21fa8aa35dc52cb2a8cf1966c17fd33677b05ea7 		Access, Read, Write
C:\Users\aETAdzjz\Music\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\9EWz4KAS-MIXJCJlGhn.m4a - Access
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\9EWz4KAS-MIXJCJlGhn.m4a.CRAB MD5: 842b4e4931048c37e4b4205f25c572d1
SHA1: e7ab1dcdbecd74fa2905c05f01230e978964bae0
SHA256: 6fb82b6be3e897add0e64eb2b4fd4824071ce91548982f2569d266da617b725b 		Access, Read, Write
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\a_PygHf3Q.mp3 - Access
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\a_PygHf3Q.mp3.CRAB MD5: 6189398162549e1c805423c5e1871bf3
SHA1: 970dc5632d8fcb3d8c3e011159bb365994bd8548
SHA256: 5894c1ee6d28cb8bc02164a03abaded2c77c1c260968a8b1764fabcbed24b0f5 		Access, Read, Write
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\D bQfyR6Xj-B_i1O.mp3 - Access
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\D bQfyR6Xj-B_i1O.mp3.CRAB MD5: 49d556035e7cf91457cc87c6be72d0db
SHA1: 8e8f9a422d2331474037c40a3f45eacafbeae3db
SHA256: 2c4f5d2aa3c9621ece5b8185516161144cccd4936f2f92dea47ea051e168cd84 		Access, Read, Write
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\D-LBl0qw97mvcJ 3o.wav - Access
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\D-LBl0qw97mvcJ 3o.wav.CRAB MD5: aafd3e6a2e73f18d4786cf5d1d095aa7
SHA1: b0f36e5c558888c7c5aea1a40a2f1f8f980028d5
SHA256: 79a53424627b925dfe4dd3d84555ddb274115ef5d8cca8286f2b04b4bd78116c 		Access, Read, Write
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\eJX7U\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\eJX7U\jgN5VYc.m4a - Access
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\eJX7U\jgN5VYc.m4a.CRAB MD5: 71252e458491efdb8b062143c6c55f93
SHA1: 1b744506a7abf83e22d715efabd00a1b963163dd
SHA256: ed52057997f9d84f6e143db93329a1a0d1d59108c480ab43618e899f502049d6 		Access, Read, Write
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\eJX7U\JJPcUbiG7zKAw ZL1d7\6Dg-kP.wav - Access
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\eJX7U\JJPcUbiG7zKAw ZL1d7\6Dg-kP.wav.CRAB MD5: b14935b92ac78e386406fd91974583cc
SHA1: ec1457e1d54ff45e0dfdd4022144e38ce99ed87f
SHA256: c29f47f51643b1136431f1d1235dcbfa8d577b6067c5562f251a4fe8443f7832 		Access, Read, Write
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\eJX7U\JJPcUbiG7zKAw ZL1d7\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\eJX7U\JJPcUbiG7zKAw ZL1d7\oEPq.mp3 - Access
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\eJX7U\JJPcUbiG7zKAw ZL1d7\oEPq.mp3.CRAB MD5: 6d544e56da39698630c21c256d3c5cd7
SHA1: 0893fa9822508c1857c7f625cd74f41254d3937b
SHA256: bf412eb0b2e95e137bc1292fb542c57b5f8dc8ab97db967dfe09cd1bd9494568 		Access, Read, Write
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\qfwMg0ir4m6Yey4\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\qfwMg0ir4m6Yey4\FYec.mp3 - Access
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\qfwMg0ir4m6Yey4\FYec.mp3.CRAB MD5: f50157017645f2e0c5b01ea1fa854d7f
SHA1: 718b33b0087afee0f7f5a9b2a0ca154de91a9d78
SHA256: 5bb0b2ac013436a352310baf4474e08b8c8067cbf208ffe515e20bee1397757e 		Access, Read, Write
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\qfwMg0ir4m6Yey4\RPBhE8ptk7.wav - Access
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\qfwMg0ir4m6Yey4\RPBhE8ptk7.wav.CRAB MD5: 7f48efd176f0acdfb827f79c2934c03a
SHA1: f5913229a552ee57dfb67aec6613e7b46efb1a99
SHA256: 58aa9df470602164ab7573aee5dcaa90580f5fa846843eacbdf15d8d342b5912 		Access, Read, Write
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\qfwMg0ir4m6Yey4\w3lAdHtHmPg8J_JeK_0.m4a - Access
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\qfwMg0ir4m6Yey4\w3lAdHtHmPg8J_JeK_0.m4a.CRAB MD5: 73cc4c700953fa7587786123d52159f7
SHA1: 1b8f1bde6371de1696c8875330e351a7c4cf9d60
SHA256: 4d5f4162ac9166657a10e28254b1640c770602d03d280adbeb48f17fdb654d3c 		Access, Read, Write
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\qXnzaZWS_5R-uakr.mp3 - Access
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\qXnzaZWS_5R-uakr.mp3.CRAB MD5: ed184eed98218b55baf371f8acfd3ce0
SHA1: cb702487d8ed5b5d81e989f8d4e384ff20fef342
SHA256: 722a75c0e59c0c761ea26ed826497b7c34a74d3ccdb2fd469f33915f42dae6f4 		Access, Read, Write
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\VydfAb.wav - Access
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\VydfAb.wav.CRAB MD5: 2531b801302d8b3972be267c332d1fdd
SHA1: f044d89c6841d4db66e48e20d09c913ae259c12b
SHA256: 6083f00e6bdcad14dbb4d103d622d42057598ce91b57a935feb71ed9a0b89529 		Access, Read, Write
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\w2IiVC9Ybxaq0Ea.m4a - Access
C:\Users\aETAdzjz\Music\DnJAknvIy7yvnJQJZIo\w2IiVC9Ybxaq0Ea.m4a.CRAB MD5: 177d075b2028983e051c97226db51b31
SHA1: be7f9eff316d0c34cec86881f9ee3fe1105aab49
SHA256: f484a8ac0a9e4beffeb241fa76f1c8e91cdfb511f1821ead836b13b4e1c3f931 		Access, Read, Write
C:\Users\aETAdzjz\Music\ftjIViaL6h\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Music\ftjIViaL6h\KClIN-RaYSOHAj2yw.m4a - Access
C:\Users\aETAdzjz\Music\ftjIViaL6h\KClIN-RaYSOHAj2yw.m4a.CRAB MD5: d748f8d4e85057c60247433e730afe5a
SHA1: 24c0be5d38ecb1b8737248c03e9867b2233ef297
SHA256: 91bac5549f33b0ec489b221e4f05facbd4b3ee8f84552086a05d95a7863070ec 		Access, Read, Write
C:\Users\aETAdzjz\Music\ftjIViaL6h\pZdmA2oAK1GREWIm.wav - Access
C:\Users\aETAdzjz\Music\ftjIViaL6h\pZdmA2oAK1GREWIm.wav.CRAB MD5: 5fa0425cef86e000ffb6d5a450cc9b35
SHA1: f29a887b94d047848775f501e1ecdf9e84091f2a
SHA256: 3517b42466a5e1ed8cefb26e6e4efd5cff25e0811c8c1f4f05b5f09c26ee095f 		Access, Read, Write
C:\Users\aETAdzjz\Music\ftjIViaL6h\V4SwSPqo7BJ8A\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Music\ftjIViaL6h\V4SwSPqo7BJ8A\v7tBytLvA7.wav - Access
C:\Users\aETAdzjz\Music\ftjIViaL6h\V4SwSPqo7BJ8A\v7tBytLvA7.wav.CRAB MD5: 701e8b2a0dbc5d51aac0ec3672bfd85d
SHA1: 13856896f5542b1b5ea7f6f88324816ac3cde385
SHA256: 74a76b07b46cf706b245eefd06dd234a057444b41257298f8fcbc33b8fc50760 		Access, Read, Write
C:\Users\aETAdzjz\Music\ftjIViaL6h\yVW1iqNL5DJe.m4a - Access
C:\Users\aETAdzjz\Music\ftjIViaL6h\yVW1iqNL5DJe.m4a.CRAB MD5: 84d38aeed2a67af76abf45558479752a
SHA1: 56ae913471ac120191351f058809bf65ea5cb4b3
SHA256: 166d8277f0b08ffa3f59856dc0d7d7c12cee9478b12cde9c1ade0b5f2f1f4cc4 		Access, Read, Write
C:\Users\aETAdzjz\Music\ftjIViaL6h\zuRuyneWHdoEvr.m4a - Access
C:\Users\aETAdzjz\Music\ftjIViaL6h\zuRuyneWHdoEvr.m4a.CRAB MD5: 8eea8de444cc9b225db183901ec76f3b
SHA1: 92c73c2e3a1149d6c28d9d20276cc4244fd85c6e
SHA256: 317c2cfc5540a84b3df9af9c7d9455e2f169f4657f6099c4b31e1c074613d9f7 		Access, Read, Write
C:\Users\aETAdzjz\Music\JVkgcZqyYA2bF.wav - Access
C:\Users\aETAdzjz\Music\JVkgcZqyYA2bF.wav.CRAB MD5: 04aac624e3f271d73f7f8d4d2467930e
SHA1: 3c2f44f4dce800bddb27451c08a1c2ec3a1cc792
SHA256: c7066920a2417eb623f309e2eebff2e5adfd7271ed81b70900c4548b9926afd3 		Access, Read, Write
C:\Users\aETAdzjz\My Documents\\CRAB-DECRYPT.txt - Access
C:\Users\aETAdzjz\NetHood\\CRAB-DECRYPT.txt - Access, Write
C:\Users\aETAdzjz\ntuser.dat.LOG1 - Access
C:\Users\aETAdzjz\ntuser.dat.LOG1.CRAB - Access
C:\Users\aETAdzjz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf - Access
C:\Users\aETAdzjz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.CRAB - Access
C:\Users\aETAdzjz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms - Access
C:\Users\aETAdzjz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.CRAB - Access
C:\Users\aETAdzjz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms - Access
C:\Users\aETAdzjz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.CRAB - Access
C:\Users\aETAdzjz\ntuser.ini - Access
C:\Users\aETAdzjz\ntuser.ini.CRAB MD5: efa4d7381b817b1c0243bd57b62fa6dc
SHA1: 97f0d0c723e161d596730a242d0e47738f4ff89d
SHA256: 89bf0b3c5b88c8e18e5478a97ddaf8fe9bc4738fcd328bdb2cffd383e962a671 		Access, Read, Write
C:\Users\aETAdzjz\OneDrive\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Pictures\_MbBu0k-_Iu.bmp - Access
C:\Users\aETAdzjz\Pictures\_MbBu0k-_Iu.bmp.CRAB MD5: bebe8365327fefef564d330b0f425d4a
SHA1: 94231355c75cd1b8800f43c45d6d87cdd12e0c71
SHA256: cba83c1b9dee7d8c9b980fde4aa4fae0037e1f1f759c40b3dab6b32ec60ce614 		Access, Read
C:\Users\aETAdzjz\Pictures\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\1CK-5-PYY6hdpu\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\1CK-5-PYY6hdpu\DgKrr3PsC.bmp - Access
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\1CK-5-PYY6hdpu\DgKrr3PsC.bmp.CRAB MD5: e0949daa153301969797ce9f3523e9ce
SHA1: 7c4f19f5ffab3d42680d3470eb14d9713978b407
SHA256: badb12219f5c291939132574749d23fc6362160699eda193fd0adde8f2af9c42 		Access, Read, Write
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\1CK-5-PYY6hdpu\gE5A-kmFfO4R.gif - Access
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\1CK-5-PYY6hdpu\gE5A-kmFfO4R.gif.CRAB MD5: 5321979c898e52433d609845d5510bc1
SHA1: 9c55998a8faced56664838770fb15e8ab02c5e17
SHA256: 92eb6da478caaa456289ee0cb460944e126c95323dee8139e238dd83bad1181e 		Access, Read, Write
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\1CK-5-PYY6hdpu\K7QnRaxPV.bmp - Access
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\1CK-5-PYY6hdpu\K7QnRaxPV.bmp.CRAB MD5: c7139ee53ebf17227795f3382514b9e3
SHA1: 1d41e1370152662ae1086eceacc9a091b44b9d83
SHA256: a6003804a5eb3b0d08058d3fdc75293a19b562e8bb5418fbcc5b43d7c15f1367 		Access, Read, Write
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\1CK-5-PYY6hdpu\kbu1BTopPng_.bmp - Access
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\1CK-5-PYY6hdpu\kbu1BTopPng_.bmp.CRAB MD5: a1e54b8589f073da8fb90b931a9d0f08
SHA1: 486558a07abe4b4cdf6e68a9012e503147db95a9
SHA256: f2ed4bf58607466ea53bea067a6b7da9d338a4dcfa7946ca45ab8550d2309f79 		Access, Read
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\1CK-5-PYY6hdpu\sk-kypk --XiL5LyXZkX.jpg - Access
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\1CK-5-PYY6hdpu\sk-kypk --XiL5LyXZkX.jpg.CRAB MD5: 1cf0f205e6e3468f56d9f49529d9debb
SHA1: f14664ba5a118d6f3a167e60ee78e4624dc34e87
SHA256: cfff34856a891d21f09fe4e3e17b4169201798b34bf7b0fb79667e558cf28adf 		Access, Read
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\1CK-5-PYY6hdpu\u-1DFFVn-tXAMZsak4.gif - Access
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\1CK-5-PYY6hdpu\u-1DFFVn-tXAMZsak4.gif.CRAB MD5: 1e878b9559a3e6b6f9038dc4ee040537
SHA1: e5f6d719bf87aa3531e6bc22aab60c11d00e12f0
SHA256: eadb1cfe731c9a56f84e888cca5ad7a14d4fe06ac2e42bfa7def6db3bbade707 		Access, Read
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\2ogIm5.jpg - Access
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\2ogIm5.jpg.CRAB MD5: 4eb7059a315ac88f2897f14685550059
SHA1: 08652148e486669a429682c2bbdeaf5c7403ab5b
SHA256: fd39a2577f296da14fecd92bf5b70e0eb3b8f96f75712b7af69da995125751f8 		Access, Read
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\BoznkZ8atv.png - Access
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\BoznkZ8atv.png.CRAB MD5: 3f119839f8ccc35dfe8f5d511238903f
SHA1: 878c1039c025663462df1168d9b0dee2ce81f1e0
SHA256: 691321254942bdeb9359faaa8220916ff9dfc183aadb8b60491d77d329dda6e7 		Access, Read
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access, Write
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\tQD3gqNF.gif - Access
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\P1pR0SKdN-Cy8_\tQD3gqNF.gif.CRAB MD5: 56352403928ede6333ba55217b0f9985
SHA1: bcc0a44d7f821593b8da3ce5bc23f217b59af740
SHA256: db051f695f580c00302c696de6aaf196cd9dbeef8dfb3bbe5f0a25a7388f1051 		Access, Read
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\sHZkLcFd.png - Access
C:\Users\aETAdzjz\Pictures\fScxNAsQ_v\sHZkLcFd.png.CRAB MD5: c9220a616ef99986e8d7035fedbfc6d1
SHA1: 83974ada641a3e531564c3c85ae4a164587c2a1e
SHA256: b34e84bc146f1e8eb76c43fe181b33c3a346c2b936528a9917705fa49fa8d49b 		Access, Read
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\2Jw56MgigGCPEC.jpg - Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\2Jw56MgigGCPEC.jpg.CRAB MD5: 1557cb674023f3e1a8d8d7814cfe03b4
SHA1: fe6a3f7914db44df5ec1eec79b8fdc50aafd6f1c
SHA256: a314b78c682d64d42cc5c6692d41b70673264184f997e9f63ca2a656b7b00226 		Access, Read
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\_5dyIJt\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\_5dyIJt\EUddouE.bmp - Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\_5dyIJt\EUddouE.bmp.CRAB MD5: badc994e83ab702978cd5189df0eb7cf
SHA1: 54a131d4ac0db34213452db22f4f90640a57a30f
SHA256: c1c7f725d3fbba3159d601f82719b91ea903215aee13c0d05b7ba2050ffac5a0 		Access, Read
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\_5dyIJt\jPr87Q6JyleIyye.bmp - Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\_5dyIJt\jPr87Q6JyleIyye.bmp.CRAB MD5: 66161fbb26ffdbae615010a37dffe0cb
SHA1: 5a6355635174d73a4aafbb3a519ad6d1c5552a84
SHA256: e7848d5994a520f059bec2f65b6990d49f50aebcd1fb067cf383f0d767753715 		Access, Read
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\_5dyIJt\TuGfVH2oUasJR2.bmp - Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\_5dyIJt\TuGfVH2oUasJR2.bmp.CRAB MD5: 44a3d6a0f75670d9ed08cfc706dfb781
SHA1: 106a80e0890e9af72bd32a596e0af9679531e997
SHA256: 9bd51c2751ab8acf1a6d38ddfaa42c73c2deebb04e423cbcdaf3ea63cad4be22 		Access, Read
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\BuEDZInR1.png - Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\BuEDZInR1.png.CRAB MD5: f777f65b4a1ef7cc7282646f279b6389
SHA1: 6fe23f1832cdcee93fc13274e853a6225f9c4c1b
SHA256: a9e22fa2d1c960611fa45c0b1e1c7437c27fe9b84505c91e43c616fd807cb0b6 		Access, Read
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\FvVrndQ4b5y8QykYluW.png - Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\FvVrndQ4b5y8QykYluW.png.CRAB MD5: a68057d5ec81bfb96eef1bccc2415b47
SHA1: 043f8fa61ddb5feea1e80746ef8ba4fdb8f87be9
SHA256: 827aa1b03d2148553dfe5291958fcf2293c3cd70c94cb0205c733546583f4ed0 		Access, Read
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\V8huw SOpdqU6738.png - Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\V8huw SOpdqU6738.png.CRAB MD5: dc77d646b543dbcf6bb81e224346ddf0
SHA1: 3513ccfa7b0a61ccd0706aadf403a8b53a1a4248
SHA256: 3776aea536cb6448d5b1661860801584f9f78269bb5dc843dbdf4eeaad34dc1f 		Access, Read
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\y2k2BlaCYA.bmp - Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\nPGhZBMpI\y2k2BlaCYA.bmp.CRAB MD5: e6b725d6209a529b40e305c68a149145
SHA1: 3bdb9149e7f065fb29a801fdded3ff86d0b7b498
SHA256: 54ca95f45d330df1afe5ef2ddfe1d33c05d13aeb8a31d538f7b1016f29636b3a 		Access, Read
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\oq3l.png - Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\oq3l.png.CRAB MD5: 7093eaff874409872499a3c7d62d184c
SHA1: 863b52e103ee495419f4de25cfd419b71b83421e
SHA256: cfb4cbc36b0ea547545038ecc68cbf14309b81a91b86bf4293a6fe6692e79786 		Access, Read
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\SkI-vCpKN\BNtIAl64_9RfqGCE.png - Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\SkI-vCpKN\BNtIAl64_9RfqGCE.png.CRAB MD5: b6c960bb9b5e5c20db591b240c553498
SHA1: a27f97275e94e10919589583b455a52830341f7d
SHA256: c00555448128a7517bbc46434e9386b7f2ec575edee0fc8f8bac69b6d83c8868 		Access, Read
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\SkI-vCpKN\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\SkI-vCpKN\sBqapK9aKG.bmp - Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\SkI-vCpKN\sBqapK9aKG.bmp.CRAB MD5: 30cd5744d7c53f5aab5f27624226e77c
SHA1: 4b2d18b530c070aa793872311b46f0f263bf3f0e
SHA256: e676ebab207b9fdc90783397ddba5fd3cc322b4738e7fd92c7ea7d573552e1d2 		Access, Read
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\SkI-vCpKN\sj8oeK-7Lm7Xag.png - Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\SkI-vCpKN\sj8oeK-7Lm7Xag.png.CRAB MD5: d143d3d35cf33dbc3b2309567fae452e
SHA1: 184cfc785f2b15cff87c13376a4b54c09fc61aee
SHA256: 76a15317d462d545491257190e053c4009f72cc43d4766637e5ee8476e6ade7b 		Access, Read
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\SkI-vCpKN\xbeZwnNGCfmWAoEC2\6RxV.bmp - Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\SkI-vCpKN\xbeZwnNGCfmWAoEC2\6RxV.bmp.CRAB MD5: 966a65c6652d8b596c88629ed6f1c46a
SHA1: c141b1097f17fe24a42be6cf537ea3c809349997
SHA256: 05a5e1db177ab940c5d0a0dd40f5a34c35a54814ec01d89b482ecd70261aee9b 		Access, Read
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\SkI-vCpKN\xbeZwnNGCfmWAoEC2\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\SkI-vCpKN\xbeZwnNGCfmWAoEC2\K37qTBALKl2aV8ZUX7N7.bmp - Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\SkI-vCpKN\xbeZwnNGCfmWAoEC2\K37qTBALKl2aV8ZUX7N7.bmp.CRAB MD5: 5ecec0b25db6190d069c59a5aab5c197
SHA1: 2419df752f77d4547ed8203e867d93919c1f7b49
SHA256: 32713096365d6af3bcc1293be1a9bd9b9d8e5f2a6bb04f8974e8535eb8330337 		Access, Read
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\T3ChsSTxvUim04r B3M.jpg - Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\T3ChsSTxvUim04r B3M.jpg.CRAB MD5: 5ae01c6c6467b3eac2600ac3c507d773
SHA1: c606c17bac86ee27a0a4bb0a3bf4ac42fa7e2351
SHA256: 0ae00668e74c6aca1c14cdc23ebd92696732d197fe20066ce009c778633c971f 		Access, Read
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\YVwcB0NXm XJvF-.png - Access
C:\Users\aETAdzjz\Pictures\Q59pVM4DGorH9C\YVwcB0NXm XJvF-.png.CRAB MD5: a1d79d48a5f8f5d066bb792d1cda7546
SHA1: b9bead8380d5bf088d6e899cec2e63614f8b21ab
SHA256: 829644569c714f34659447c84471755c3a1915805d4b811da72f04e495310f74 		Access, Read
C:\Users\aETAdzjz\Pictures\ySXDqWMK31.png - Access
C:\Users\aETAdzjz\Pictures\ySXDqWMK31.png.CRAB MD5: 40e4445abc3ac6511fa6b2b5320276de
SHA1: f72af945c1b386ab29866d290433a8062770c6e9
SHA256: 2da8ee04250c35fc0aa05408f252c1b81a74716bc69e46b6e1264a1b07b08fde 		Access, Read
C:\Users\aETAdzjz\PrintHood\\CRAB-DECRYPT.txt - Access
C:\Users\aETAdzjz\Recent\\CRAB-DECRYPT.txt - Access
C:\Users\aETAdzjz\Saved Games\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\aETAdzjz\Searches\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\aETAdzjz\Searches\Everywhere.search-ms - Access
C:\Users\aETAdzjz\Searches\Everywhere.search-ms.CRAB MD5: 45fc0c46540707624254323d2016b19f
SHA1: 790150a90efbaae364c11fe9d3c37f9bbc07ef6e
SHA256: b33f9814420922f83557cbab25934db0a07476bd7b859b4f563d374256aedbbf 		Access, Read
C:\Users\aETAdzjz\Searches\Indexed Locations.search-ms - Access
C:\Users\aETAdzjz\Searches\Indexed Locations.search-ms.CRAB MD5: eac42fda738e8492e9cae54aa3a88b77
SHA1: 3d56029d4e5f6d06573941e2f44fe3731d3b727f
SHA256: c851a6348cd53f74f178cd6e866a82d5c2422d6bdb199689a0deda4cff665dd7 		Access, Read
C:\Users\aETAdzjz\SendTo\\CRAB-DECRYPT.txt - Access
C:\Users\aETAdzjz\Start Menu\\CRAB-DECRYPT.txt - Access
C:\Users\aETAdzjz\Templates\\CRAB-DECRYPT.txt - Access
C:\Users\aETAdzjz\Videos\-SdkY.swf - Access
C:\Users\aETAdzjz\Videos\-SdkY.swf.CRAB MD5: 8b26582feadb3045f269d5dd82f80717
SHA1: 2de4860056378366f34f217702264445a4d65918
SHA256: 612a51298d8da05933b9b97549657ec53d02ae48b63d09944dd749606f5790c9 		Access, Read
C:\Users\aETAdzjz\Videos\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\3UXeHKbbXw-r\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\3UXeHKbbXw-r\QDD7A0e-A.avi - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\3UXeHKbbXw-r\QDD7A0e-A.avi.CRAB MD5: 415f32a69c2efdca6f289d524e08618d
SHA1: f8beb27f79865da2342a31ae7772aba5f3e8747f
SHA256: 27945df97ad1a906a8b6843d6379f387896a04abafe9da335ad272727305bdcb 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\3UXeHKbbXw-r\TLs2N.mp4 - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\3UXeHKbbXw-r\TLs2N.mp4.CRAB MD5: 8f6f99b2579409902820b36a9d2bb746
SHA1: fad909c654608927814791d6d0034815ff754bcb
SHA256: a9b2ce148fb9b7a836ce1e5ea2f8d6043cf90d505b751b2dacb61f1554158d54 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\8O9xXt.swf - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\8O9xXt.swf.CRAB MD5: 685d7f0f30d0e85f4aeb5ae172d79765
SHA1: 6152f9463a112a62bcb21771e0b0754e0a46eaaa
SHA256: 00494cf7a7c3612cc5c8a7dbd21db0c5f2bb3ba85e7c977430c9fd0963372089 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\EJ9vcoke2lSJIuDXSXx.swf - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\EJ9vcoke2lSJIuDXSXx.swf.CRAB MD5: 4829d92ce2530e476d95452b399aa7b0
SHA1: fc8884edc6482df9f5dbf7a0f4a2f45d7338b9cc
SHA256: b6a5bbf092e9eb0a056e08f66a02251a8056c1f34917e7f22cae1f2a8f38ca80 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\HX2dzKtlxgYXBA8.swf - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\HX2dzKtlxgYXBA8.swf.CRAB MD5: 6dffe19fb887386ab4a89854dab9d72b
SHA1: 1a761dcb09bb4aebf5d8c171c6dac97e108b629a
SHA256: ac51f72f362b745397b58e47fe97dc41d9cb1cf92a757b081555305712a2460c 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\lfjH1XL3c6i19s5Hu2-j.avi - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\lfjH1XL3c6i19s5Hu2-j.avi.CRAB MD5: d8b613f09fbe8bfaa78fb6ca4244733a
SHA1: 764b6c4b3e2556341bf75211b86f0a6a5d40e3c2
SHA256: 9cbb015d9ff86e7df0286d6b0661f57eccaee44cb1d921d9b233a918ddcdaf50 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\sh0KYzRkmp\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\sh0KYzRkmp\k6C95aC_bo9_y8z.flv - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\sh0KYzRkmp\k6C95aC_bo9_y8z.flv.CRAB MD5: 7ba4e89fafa3c27d2493a663e19afb1b
SHA1: 6ffd0c5d1bf63278347ecbb5ed141050c5d37148
SHA256: f71820e01ae6135ff899ad69c9903f97e1c5e005bc9045899192987d514022bb 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\sh0KYzRkmp\rlAruLPws8rV.flv - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\sh0KYzRkmp\rlAruLPws8rV.flv.CRAB MD5: 926aa9d2a15e5520636941ac7f4d5f6a
SHA1: 16f2d18dd0b632947ae5af7bd76a52e53a5508ae
SHA256: ef5ef401ba0e10fc2810839dbc47f940d5af46aa5a45cc5c1ffe0c8ea80a86f1 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\sh0KYzRkmp\ze71h6CqYsdxZZLPI hB.mp4 - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\sh0KYzRkmp\ze71h6CqYsdxZZLPI hB.mp4.CRAB MD5: e3995d56fda78e0a2f1ec2f3373e4a30
SHA1: 672499e10b964e786599605df198269bb270550a
SHA256: 7b72c57beba0c7e314c724962670ac55197a2921d31f70e5d537c70186db203e 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\V7Z3 2hnk.avi - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\V7Z3 2hnk.avi.CRAB MD5: a6d321861a58561acd24f6b27b596a21
SHA1: ea72db883c1d5bfd948afe21abb9f20ab12a2cdf
SHA256: 09a0dd5aedb55d77b4d1eb87afd7cb792852d7561ab9e21944c2043754a2e7e8 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\vC-V.avi - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\Jg-ab\vC-V.avi.CRAB MD5: d09829de813cca86b2be2d36a5249814
SHA1: bafd736e794dd3deeebfa0ae09b3db36bf8798da
SHA256: 63e6649e8d1198f645f3f46a7ef44991a18b5324e8ce8b669201aa2a63adf852 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\-eUz-S.mkv - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\-eUz-S.mkv.CRAB MD5: 6f77f67d83e09b397f387a44fe888369
SHA1: eb1f4f91ffab894ae82521e37d62ceae32ed49ec
SHA256: 488aace7046ae164c9872a71d7155c67ed710a0dbb05468afc0ac69cd3e3aa5c 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\52oQ3vG.mp4 - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\52oQ3vG.mp4.CRAB MD5: d8b414e1cb96db4137eb1f3baa87a140
SHA1: 72a3d76d426a39140d923510a402ac467085965b
SHA256: b2e875ac4506587df20d2172c7bb089c7d1c833fa85ffac2b5b567105baf1166 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\LVY0PuNrn5f.swf - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\LVY0PuNrn5f.swf.CRAB MD5: a70d0962c5595975688a0f4fbb940bb1
SHA1: f72af1fb85967020bb734cb7f8248acd7cc7736c
SHA256: ab77152f81d717f7649818430498db47aa96c32fac4f834569fffc8c2a93fc84 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\OgUB3UM-1Ki.mkv - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\OgUB3UM-1Ki.mkv.CRAB MD5: 5e21d5570bf52bb174eeb1bc3ca6aa74
SHA1: 739c47cdcec06b05bd79c516273f18faee9859fa
SHA256: 9da1322d4f76b604937aa520ddb1acfb05451bd942f9644ce19bf018ffc68cbb 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\SoIB.mp4 - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\SoIB.mp4.CRAB MD5: 8147b5f0e3e065cd3b76477ab59f0cf9
SHA1: 72fa67c9c6245d3c9b41b5100c838c563c61220a
SHA256: f8b03c4166784ef5df70765714af5b3210708555cbb17f598cb1de941b5db5df 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\u6Lb6668pv_ePK\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\u6Lb6668pv_ePK\FuYV 5CjGyx2.flv - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\u6Lb6668pv_ePK\FuYV 5CjGyx2.flv.CRAB MD5: cb465ed56818d04f0985e03a48a2b4b8
SHA1: e9d8614314d98f2003c06835ecd896b2c54ab7bb
SHA256: c3bdef3836ef49fc68cb39aebd129457ee6fca02b24467e08a2752048e10481b 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\u6Lb6668pv_ePK\gbPNuTxd-3d.mkv - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\u6Lb6668pv_ePK\gbPNuTxd-3d.mkv.CRAB MD5: 3eb5efe8997c9cbc7915cc2ef2fee42d
SHA1: 541ef6c84040a93bd508e697cc6e6a7a7d271c8e
SHA256: 76dd101cdcd45d6c43736261661dcc7f9313b2929b6f33c3f4a9d73e4cb49bd9 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\u6Lb6668pv_ePK\GVGh.mp4 - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\u6Lb6668pv_ePK\GVGh.mp4.CRAB MD5: 02633b3554556507fa414e7b8630eb6e
SHA1: 843ddc8a7f274763f7a8fe5aadd5f78a32c43287
SHA256: 0e26de403a36c48b7e1a254cf53d090b423421a6fdb0e116910d9232dd5c7cd6 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\u6Lb6668pv_ePK\H7OLyvSh.swf - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\u6Lb6668pv_ePK\H7OLyvSh.swf.CRAB MD5: 221f2340ff31e1b38466c2e2b3ba4ee1
SHA1: c3e0ddb7a0c26acde3107b6269058bf8eb9d26dc
SHA256: 3f983a8e3d8f55af8a45080bbb05aa937c498a92d0243e1195a64348ce421be8 		Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\yyIGUAJ.avi - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\6qNC7PF6pw8CP\yyIGUAJ.avi.CRAB - Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\eJLYp.avi - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\eJLYp.avi.CRAB - Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\IU1DWVjnOQ.mp4 - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\IU1DWVjnOQ.mp4.CRAB - Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\UIGKJ-xK4JFgBZxCjkg.flv - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\kdvACwNk9kbryTA3pNb\UIGKJ-xK4JFgBZxCjkg.flv.CRAB - Access, Read
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\P9AXgasP1.swf - Access
C:\Users\aETAdzjz\Videos\CrcPLeAZTAb\P9AXgasP1.swf.CRAB - Access, Read
C:\Users\aETAdzjz\Videos\EJD1E7OJwGrA_\4udnlrtpCkLpV\\CRAB-DECRYPT.txt - Access
C:\Users\aETAdzjz\Videos\EJD1E7OJwGrA_\4udnlrtpCkLpV\NgUaI6nizEJrSSJwEf.swf - Access
C:\Users\aETAdzjz\Videos\EJD1E7OJwGrA_\4udnlrtpCkLpV\NgUaI6nizEJrSSJwEf.swf.CRAB - Access, Read
C:\Users\aETAdzjz\Videos\EJD1E7OJwGrA_\4udnlrtpCkLpV\xN4-CdqpTPL.mp4 - Access
C:\Users\aETAdzjz\Videos\EJD1E7OJwGrA_\4udnlrtpCkLpV\xN4-CdqpTPL.mp4.CRAB - Access, Read
C:\Users\aETAdzjz\Videos\EJD1E7OJwGrA_\\CRAB-DECRYPT.txt - Access
C:\Users\aETAdzjz\Videos\EJD1E7OJwGrA_\DZEWoA.mp4 - Access
C:\Users\aETAdzjz\Videos\EJD1E7OJwGrA_\DZEWoA.mp4.CRAB - Access, Read
C:\Users\aETAdzjz\Videos\EJD1E7OJwGrA_\lrfPRUFSBO.swf - Access
C:\Users\aETAdzjz\Videos\EJD1E7OJwGrA_\lrfPRUFSBO.swf.CRAB - Access, Read
C:\Users\aETAdzjz\Videos\EJD1E7OJwGrA_\Lze-.swf - Access
C:\Users\aETAdzjz\Videos\EJD1E7OJwGrA_\Lze-.swf.CRAB - Access, Read
C:\Users\aETAdzjz\Videos\K2goKozqCEekz.mp4 - Access
C:\Users\aETAdzjz\Videos\K2goKozqCEekz.mp4.CRAB - Access, Read
C:\Users\aETAdzjz\Videos\NWaecIZZww\AU1oJtFPtafkgI.mkv - Access
C:\Users\aETAdzjz\Videos\NWaecIZZww\AU1oJtFPtafkgI.mkv.CRAB - Access, Read
C:\Users\aETAdzjz\Videos\NWaecIZZww\\CRAB-DECRYPT.txt - Access
C:\Users\aETAdzjz\Videos\NWaecIZZww\lVfIKS_.avi - Access
C:\Users\aETAdzjz\Videos\NWaecIZZww\lVfIKS_.avi.CRAB - Access, Read
C:\Users\aETAdzjz\Videos\NWaecIZZww\rtcHdEW_7G.flv - Access
C:\Users\aETAdzjz\Videos\NWaecIZZww\rtcHdEW_7G.flv.CRAB - Access, Read
C:\Users\aETAdzjz\Videos\NWaecIZZww\SBWOH5YblpeI-PLfXpdW.mp4 - Access
C:\Users\aETAdzjz\Videos\NWaecIZZww\SBWOH5YblpeI-PLfXpdW.mp4.CRAB - Access, Read
C:\Users\aETAdzjz\Videos\NWaecIZZww\YwfVdjc-3VCK6j.mp4 - Access
C:\Users\aETAdzjz\Videos\NWaecIZZww\YwfVdjc-3VCK6j.mp4.CRAB - Access, Read
C:\Users\aETAdzjz\Videos\qpeUqgoHaKIMt2x62.swf - Access
C:\Users\aETAdzjz\Videos\qpeUqgoHaKIMt2x62.swf.CRAB - Access, Read
C:\Users\\CRAB-DECRYPT.txt MD5: 6b44484db046284ce0b4caa99e56d71b
SHA1: 2e0acd671535782ca139098a6234086071d57648
SHA256: 773ca23e6a02ca92ed3ee54b293d6df3125696bfa0ebaa0e0b74f8fef552d33d 		Access
C:\Users\Default User\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Application Data\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\History\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Credentials\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\1NBUR4HR\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\6ASVN7J7\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\D68G7BIJ\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\index.dat - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\index.dat.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\KQMHSVKD\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\FeedsStore.feedsdb-ms - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\FeedsStore.feedsdb-ms.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Home~.feed-ms - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Home~.feed-ms.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Work~.feed-ms - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Work~.feed-ms.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\MSNBC News~.feed-ms - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\MSNBC News~.feed-ms.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Web Slice Gallery~.feed-ms - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Web Slice Gallery~.feed-ms.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\brndlog.bak - Access
C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\brndlog.bak.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\brndlog.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\brndlog.txt.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\CurrentDatabase_372.wmdb - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\CurrentDatabase_372.wmdb.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\LocalMLS_3.wmdb - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\LocalMLS_3.wmdb.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\01_Music_auto_rated_at_5_stars.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\01_Music_auto_rated_at_5_stars.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\02_Music_added_in_the_last_month.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\02_Music_added_in_the_last_month.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\03_Music_rated_at_4_or_5_stars.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\03_Music_rated_at_4_or_5_stars.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\04_Music_played_in_the_last_month.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\04_Music_played_in_the_last_month.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\05_Pictures_taken_in_the_last_month.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\05_Pictures_taken_in_the_last_month.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\06_Pictures_rated_4_or_5_stars.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\06_Pictures_rated_4_or_5_stars.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\07_TV_recorded_in_the_last_week.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\07_TV_recorded_in_the_last_week.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\08_Video_rated_at_4_or_5_stars.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\08_Video_rated_at_4_or_5_stars.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\09_Music_played_the_most.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\09_Music_played_the_most.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\10_All_Music.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\10_All_Music.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\11_All_Pictures.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\11_All_Pictures.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\12_All_Video.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\12_All_Video.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\edb00001.log - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\edb00001.log.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\WindowsMail.MSMessageStore - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\WindowsMail.MSMessageStore.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\WindowsMail.pat - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\WindowsMail.pat.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb.chk - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb.chk.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb.log - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb.log.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb00001.log - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb00001.log.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edbres00001.jrs - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edbres00001.jrs.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edbres00002.jrs - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edbres00002.jrs.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\oeold.xml - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\oeold.xml.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Bears.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Bears.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Bears.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Bears.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Garden.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Garden.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Garden.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Garden.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Green Bubbles.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Green Bubbles.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\GreenBubbles.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\GreenBubbles.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Hand Prints.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Hand Prints.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\HandPrints.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\HandPrints.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Orange Circles.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Orange Circles.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\OrangeCircles.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\OrangeCircles.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Peacock.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Peacock.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Peacock.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Peacock.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Shades of Blue.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Shades of Blue.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\ShadesOfBlue.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\ShadesOfBlue.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Soft Blue.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Soft Blue.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\SoftBlue.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\SoftBlue.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Stars.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Stars.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Stars.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Stars.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\WindowsMail.MSMessageStore - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\WindowsMail.MSMessageStore.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\WindowsMail.pat - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\WindowsMail.pat.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Media\12.0\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.DTD - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.DTD.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Media\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\Gadgets\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\Settings.ini - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\Settings.ini.CRAB - Access, Read
C:\Users\Default\AppData\Local\Temp\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Temporary Internet Files\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\LocalLow\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\LocalLow\Microsoft\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B2238AACCEDC3F1FFE8E7EB5F575EC9 - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B2238AACCEDC3F1FFE8E7EB5F575EC9.CRAB - Access, Read
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B2238AACCEDC3F1FFE8E7EB5F575EC9 - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B2238AACCEDC3F1FFE8E7EB5F575EC9.CRAB - Access, Read
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015 - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015.CRAB - Access, Read
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Identities\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Identities\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Credentials\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Crypto\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Crypto\RSA\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Protect\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Protect\CREDHIST - Access
C:\Users\Default\AppData\Roaming\Microsoft\Protect\CREDHIST.CRAB - Access, Read
C:\Users\Default\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9 - Access
C:\Users\Default\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.CRAB - Access, Read
C:\Users\Default\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred - Access
C:\Users\Default\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred.CRAB - Access, Read
C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificates\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificates\My\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Application Data\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Contacts\Administrator.contact - Access
C:\Users\Default\Contacts\Administrator.contact.CRAB - Access, Read
C:\Users\Default\Contacts\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Cookies\\CRAB-DECRYPT.txt - Access
C:\Users\Default\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Desktop\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Documents\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Documents\My Music\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Documents\My Pictures\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Documents\My Videos\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Downloads\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Favorites\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Favorites\Links\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Favorites\Links\Web Slice Gallery.url - Access
C:\Users\Default\Favorites\Links\Web Slice Gallery.url.CRAB - Access, Read
C:\Users\Default\Favorites\Microsoft Websites\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Favorites\Microsoft Websites\IE Add-on site.url - Access
C:\Users\Default\Favorites\Microsoft Websites\IE Add-on site.url.CRAB - Access, Read
C:\Users\Default\Favorites\Microsoft Websites\IE site on Microsoft.com.url - Access
C:\Users\Default\Favorites\Microsoft Websites\IE site on Microsoft.com.url.CRAB - Access, Read
C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Home.url - Access
C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Home.url.CRAB - Access, Read
C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Work.url - Access
C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Work.url.CRAB - Access, Read
C:\Users\Default\Favorites\Microsoft Websites\Microsoft Store.url - Access
C:\Users\Default\Favorites\Microsoft Websites\Microsoft Store.url.CRAB - Access, Read
C:\Users\Default\Favorites\MSN Websites\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Favorites\MSN Websites\MSN Autos.url - Access
C:\Users\Default\Favorites\MSN Websites\MSN Autos.url.CRAB - Access, Read
C:\Users\Default\Favorites\MSN Websites\MSN Entertainment.url - Access
C:\Users\Default\Favorites\MSN Websites\MSN Entertainment.url.CRAB - Access, Read
C:\Users\Default\Favorites\MSN Websites\MSN Money.url - Access
C:\Users\Default\Favorites\MSN Websites\MSN Money.url.CRAB - Access, Read
C:\Users\Default\Favorites\MSN Websites\MSN Sports.url - Access
C:\Users\Default\Favorites\MSN Websites\MSN Sports.url.CRAB - Access, Read
C:\Users\Default\Favorites\MSN Websites\MSN.url - Access
C:\Users\Default\Favorites\MSN Websites\MSN.url.CRAB - Access, Read
C:\Users\Default\Favorites\MSN Websites\MSNBC News.url - Access
C:\Users\Default\Favorites\MSN Websites\MSNBC News.url.CRAB - Access, Read
C:\Users\Default\Favorites\Windows Live\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Favorites\Windows Live\Get Windows Live.url - Access
C:\Users\Default\Favorites\Windows Live\Get Windows Live.url.CRAB - Access, Read
C:\Users\Default\Favorites\Windows Live\Windows Live Gallery.url - Access
C:\Users\Default\Favorites\Windows Live\Windows Live Gallery.url.CRAB - Access, Read
C:\Users\Default\Favorites\Windows Live\Windows Live Mail.url - Access
C:\Users\Default\Favorites\Windows Live\Windows Live Mail.url.CRAB - Access, Read
C:\Users\Default\Favorites\Windows Live\Windows Live Spaces.url - Access
C:\Users\Default\Favorites\Windows Live\Windows Live Spaces.url.CRAB - Access, Read
C:\Users\Default\Links\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Music\\CRAB-DECRYPT.txt - Access
C:\Users\Default\My Documents\\CRAB-DECRYPT.txt - Access
C:\Users\Default\NetHood\\CRAB-DECRYPT.txt - Access
C:\Users\Default\NTUSER.DAT.LOG1 - Access
C:\Users\Default\NTUSER.DAT.LOG1.CRAB - Access, Read
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf - Access
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.CRAB - Access, Read
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms - Access
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.CRAB - Access, Read
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms - Access
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.CRAB - Access, Read
C:\Users\Default\ntuser.ini - Access
C:\Users\Default\ntuser.ini.CRAB - Access, Read
C:\Users\Default\Pictures\\CRAB-DECRYPT.txt - Access
C:\Users\Default\PrintHood\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Recent\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Saved Games\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Searches\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Searches\Everywhere.search-ms - Access
C:\Users\Default\Searches\Everywhere.search-ms.CRAB - Access, Read
C:\Users\Default\Searches\Indexed Locations.search-ms - Access
C:\Users\Default\Searches\Indexed Locations.search-ms.CRAB - Access, Read
C:\Users\Default\SendTo\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Start Menu\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Templates\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Videos\\CRAB-DECRYPT.txt - Access
C:\Users\Public\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Documents\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Documents\My Music\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Documents\My Pictures\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Documents\My Videos\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Downloads\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Favorites\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Libraries\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Libraries\RecordedTV.library-ms - Access
C:\Users\Public\Libraries\RecordedTV.library-ms.CRAB - Access, Read
C:\Users\Public\Music\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Music\Sample Music\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Music\Sample Music\Kalimba.mp3 - Access
C:\Users\Public\Music\Sample Music\Kalimba.mp3.CRAB - Access, Read
C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3 - Access
C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3.CRAB - Access, Read
C:\Users\Public\Music\Sample Music\Sleep Away.mp3 - Access
C:\Users\Public\Music\Sample Music\Sleep Away.mp3.CRAB - Access, Read
C:\Users\Public\Pictures\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg.CRAB - Access, Read
C:\Users\Public\Pictures\Sample Pictures\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Pictures\Sample Pictures\Desert.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Desert.jpg.CRAB - Access, Read
C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg.CRAB - Access, Read
C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg.CRAB - Access, Read
C:\Users\Public\Pictures\Sample Pictures\Koala.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Koala.jpg.CRAB - Access, Read
C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg.CRAB - Access, Read
C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg.CRAB - Access, Read
C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg.CRAB - Access, Read
C:\Users\Public\Recorded TV\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Recorded TV\Sample Media\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv - Access
C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv.CRAB - Access, Read
C:\Users\Public\Videos\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Videos\Sample Videos\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Videos\Sample Videos\Wildlife.wmv - Access
C:\Users\Public\Videos\Sample Videos\Wildlife.wmv.CRAB - Access, Read
Registry (70)
»
Registry Key Name Operations
HKEY_CLASSES_ROOT\Clsid\{1C3B4210-F441-11CE-B9EA-00AA006B1A69} Access
HKEY_CLASSES_ROOT\Clsid\{1C3B4210-F441-11CE-B9EA-00AA006B1A69}\Control Access
HKEY_CLASSES_ROOT\Clsid\{1C3B4210-F441-11CE-B9EA-00AA006B1A69}\Insertable Access
HKEY_CLASSES_ROOT\Clsid\{5CEF5610-713D-11CE-80C9-00AA00611080} Access
HKEY_CLASSES_ROOT\Clsid\{5CEF5610-713D-11CE-80C9-00AA00611080}\Control Access
HKEY_CLASSES_ROOT\Clsid\{5CEF5610-713D-11CE-80C9-00AA00611080}\Insertable Access
HKEY_CLASSES_ROOT\Clsid\{646BE917-EFED-46C6-AFC9-CA1FBD3C5100} Access
HKEY_CLASSES_ROOT\Clsid\{646BE917-EFED-46C6-AFC9-CA1FBD3C5100}\Control Access
HKEY_CLASSES_ROOT\Clsid\{646BE917-EFED-46C6-AFC9-CA1FBD3C5100}\Insertable Access
HKEY_CLASSES_ROOT\Clsid\{82B02373-B5BC-11CF-810F-00A0C9030074} Access
HKEY_CLASSES_ROOT\Clsid\{82B02373-B5BC-11CF-810F-00A0C9030074}\Control Access
HKEY_CLASSES_ROOT\Clsid\{82B02373-B5BC-11CF-810F-00A0C9030074}\Insertable Access
HKEY_CLASSES_ROOT\Clsid\{82B02374-B5BC-11CF-810F-00A0C9030074} Access
HKEY_CLASSES_ROOT\Clsid\{82B02374-B5BC-11CF-810F-00A0C9030074}\Control Access
HKEY_CLASSES_ROOT\Clsid\{82B02374-B5BC-11CF-810F-00A0C9030074}\Insertable Access
HKEY_CLASSES_ROOT\Clsid\{82B02375-B5BC-11CF-810F-00A0C9030074} Access
HKEY_CLASSES_ROOT\Clsid\{82B02375-B5BC-11CF-810F-00A0C9030074}\Control Access
HKEY_CLASSES_ROOT\Clsid\{82B02375-B5BC-11CF-810F-00A0C9030074}\Insertable Access
HKEY_CLASSES_ROOT\Clsid\{8A683C92-BA84-11CF-8110-00A0C9030074} Access
HKEY_CLASSES_ROOT\Clsid\{8A683C92-BA84-11CF-8110-00A0C9030074}\Control Access
HKEY_CLASSES_ROOT\Clsid\{8A683C92-BA84-11CF-8110-00A0C9030074}\Insertable Access
HKEY_CLASSES_ROOT\Clsid\{8A683C93-BA84-11CF-8110-00A0C9030074} Access
HKEY_CLASSES_ROOT\Clsid\{8A683C93-BA84-11CF-8110-00A0C9030074}\Control Access
HKEY_CLASSES_ROOT\Clsid\{8A683C93-BA84-11CF-8110-00A0C9030074}\Insertable Access
HKEY_CLASSES_ROOT\Clsid\{909E0AE0-16DC-11CE-9E98-00AA00574A4F} Access
HKEY_CLASSES_ROOT\Clsid\{909E0AE0-16DC-11CE-9E98-00AA00574A4F}\Control Access
HKEY_CLASSES_ROOT\Clsid\{909E0AE0-16DC-11CE-9E98-00AA00574A4F}\Insertable Access
HKEY_CLASSES_ROOT\Clsid\{AFC20920-DA4E-11CE-B943-00AA006887B4} Access
HKEY_CLASSES_ROOT\Clsid\{AFC20920-DA4E-11CE-B943-00AA006887B4}\Control Access
HKEY_CLASSES_ROOT\Clsid\{AFC20920-DA4E-11CE-B943-00AA006887B4}\Insertable Access
HKEY_CLASSES_ROOT\Licenses Access
HKEY_CLASSES_ROOT\Licenses\8804558B-B773-11d1-BC3E-0000F87552E7 Read
HKEY_CLASSES_ROOT\TypeLib Access
HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046} Access
HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0 Access
HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0 Access
HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win64 Access, Read
HKEY_CLASSES_ROOT\TypeLib\{000204EF-0000-0000-C000-000000000046} Access
HKEY_CLASSES_ROOT\TypeLib\{000204EF-0000-0000-C000-000000000046}\4.2 Access
HKEY_CLASSES_ROOT\TypeLib\{000204EF-0000-0000-C000-000000000046}\4.2\9 Access
HKEY_CLASSES_ROOT\TypeLib\{000204EF-0000-0000-C000-000000000046}\4.2\9\win64 Access, Read
HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046} Access
HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046}\8.7 Access
HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046}\8.7\0 Access
HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046}\8.7\0\win64 Access, Read
HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046}\8.7\409 Access
HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046}\8.7\9 Access
HKEY_CLASSES_ROOT\TypeLib\{0D452EE1-E08F-101A-852E-02608C4D0BB4} Access
HKEY_CLASSES_ROOT\TypeLib\{0D452EE1-E08F-101A-852E-02608C4D0BB4}\2.0 Access
HKEY_CLASSES_ROOT\TypeLib\{0D452EE1-E08F-101A-852E-02608C4D0BB4}\2.0\0 Access
HKEY_CLASSES_ROOT\TypeLib\{0D452EE1-E08F-101A-852E-02608C4D0BB4}\2.0\0\win64 Access, Read
HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52} Access
HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\2.8 Access
HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\2.8\0 Access
HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\2.8\0\win64 Access, Read
HKEY_CLASSES_ROOT\Typelib Access
HKEY_CLASSES_ROOT\Typelib\{0D452EE1-E08F-101A-852E-02608C4D0BB4} Access
HKEY_CURRENT_USER\Control Panel\International Access, Read
HKEY_CURRENT_USER\Keyboard Layout\Preload Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor Access, Read
HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common Access, Read
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System Access
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce Access, Write
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor Access, Read
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DNSClient Access
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters Access, Read
Mutex (1)
»
Mutex Name Operations
Global\pc_group=WORKGROUP&ransom_id=8a13d26b705ba84c Access
URL (6)
»
URL Operations
http://209.141.49.93/hello.bin GET
ipv4bot.whatismyipaddress.com/ GET
176.223.114.212/ayphore POST
93.103.166.70/stowsc?orestei=ea POST
87.97.250.231/steiphai?deere=ayssey&iezaer=seyst POST
185.42.194.116/fee POST
IP (9)
»
IP Protocols
209.141.49.93 HTTP, TCP
190.35.242.126 DNS, UDP
197.254.118.42 DNS, UDP
221.120.220.72 DNS, UDP
81.4.163.122 DNS, UDP
176.223.114.212 HTTP, TCP
93.103.166.70 HTTP, TCP
87.97.250.231 HTTP, TCP
185.42.194.116 HTTP, TCP
Export IOCs
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image