GrandSoft Exploit Kit delivers GandCrab 3.0.0 Ransomware | IOCs
Logo
Try VMRay Analyzer
VTI SCORE: 100/100
Target: win7_64_sp1 | ie
Classification: Downloader, Ransomware

http://financialbroker.gq

URL

Created at 2018-04-24 10:30:00

...

Notifications (2/3)

Some extracted files may be missing in the report since the maximum number of extracted files was reached during the analysis. You can increase the limit in the configuration settings.

Code overwrite was observed during this analysis. Note that the analysis results may be affected by this modification by the sample.

The operating system was rebooted during the analysis.

Indicators

File (1275)
»
Filename Hash Operations
C:\$Recycle.Bin\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\bootmgr - Access
C:\bootmgr.CRAB - Access
C:\Config.Msi\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Documents and Settings\\CRAB-DECRYPT.txt - Access, Write
C:\MalwarebytesLABs - Access
C:\MSOCache\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\PerfLogs\Admin\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\PerfLogs\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Program Files (x86)\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Program Files\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Program Files\Microsoft SQL Server Compact Edition\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\Desktop\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Recovery\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\boot.sdi - Access
C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\boot.sdi.CRAB MD5: 682e00a8e399b20af90bccafb0784163
SHA1: 57eb4d5fbdfe6282976591a41e92f0450eb52645
SHA256: 6e9805712446d85ecf79baa8eb99efd23c8c4b5e78686a25e7cda07bb769ed96 		Access, Read, Write
C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\Winre.wim - Access
C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\Winre.wim.CRAB MD5: b8848054694ec6e2b0bcee2af3bff568
SHA1: f1e7af6f976d2faee271581c8f745c37dc9bd5b8
SHA256: 2db3241f0aa4b5b9c6c7532ed17be81475592e70cde4afa9c68287755dfc46c1 		Access, Read, Write
C:\System Volume Information\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\System Volume Information\SPP\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\System Volume Information\SPP\OnlineMetadataCache\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{00c95144-e912-40b3-a2d1-b8e12bc815d0}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{00c95144-e912-40b3-a2d1-b8e12bc815d0}_OnDiskSnapshotProp.CRAB MD5: f1564f412c3bb7b0565f2c32b79fbb19
SHA1: 37871173085dfb1ca484179e1eac00993596a814
SHA256: 4bd2110cef4673aaa43956190285942954f01aedf93b84158c23aed4910029f1 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{1ce95dd8-c40b-44fd-a9e6-d72d44ed8f39}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{1ce95dd8-c40b-44fd-a9e6-d72d44ed8f39}_OnDiskSnapshotProp.CRAB MD5: c8053bfb0e00d37b87c8366dd11e0117
SHA1: 678d7424af8b5fe41b2545813e0864f48d946bb1
SHA256: c5c03d8232e51c88fbf0ae38239e036e92c40bae31fbf8025760093dd939ed1a 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{1e9425cc-553b-418f-b0c6-ad1ac9e1ba0c}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{1e9425cc-553b-418f-b0c6-ad1ac9e1ba0c}_OnDiskSnapshotProp.CRAB MD5: dd8deabf19a36670c27d98ccbe784819
SHA1: ec2dec1b140775e7103666bc490a838968eb12e5
SHA256: d937d9368eae129b4a2d957119c768cf7062d6761ddbf0c36024eedec4454383 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{29088c66-de5f-456f-85c0-6e4156f94358}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{29088c66-de5f-456f-85c0-6e4156f94358}_OnDiskSnapshotProp.CRAB MD5: ca8b34adfec3c03bb07e25537b26d4f0
SHA1: 8c0dfe07a9dd4d19bca62b379ecaafa8501a285f
SHA256: da8274555bdb3dc619c818f0acd166ac1f8a495962f03a1ef6c4c1af82aee14b 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{29296136-1f54-4fd8-b5c7-32fc96ef3c76}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{29296136-1f54-4fd8-b5c7-32fc96ef3c76}_OnDiskSnapshotProp.CRAB MD5: 53f573cde0f72f4cd656dc8ae9fc8452
SHA1: 238a45811d81fb65be567d5e8003f115b1e3a49e
SHA256: 878b671d3fef42ecaf969540fa2e79bf9afb32a0ddfc79d90b16d336c8728061 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{4204ee1b-0338-4788-b199-d83e4955faf1}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{4204ee1b-0338-4788-b199-d83e4955faf1}_OnDiskSnapshotProp.CRAB MD5: d76d21f4ec7aa31208455d4977e84d65
SHA1: f245c0c0ca8903b70320b6e3743fa57ca8f00e37
SHA256: 3883c22e33d46f77594043d9408bea72340763402d147b4c94bf048bc1f772d7 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{425865b3-1a09-4be3-8a97-1baffda74ed0}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{425865b3-1a09-4be3-8a97-1baffda74ed0}_OnDiskSnapshotProp.CRAB MD5: 52a544a55d75939aaf10e2404317f81f
SHA1: db6d604d823f5f6f2a3c83ff807346573e1bcf0d
SHA256: 951ae608644cf3b547a18ee13d955226de1cbf8a9c54c7746ddf23ec5aed0f61 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{51296d62-5aa5-412e-9a8f-abe77cd15e9e}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{51296d62-5aa5-412e-9a8f-abe77cd15e9e}_OnDiskSnapshotProp.CRAB MD5: d268ab64dcd141c61e5c92edea51b36a
SHA1: cbbfdabd8575be73e72fb9475bacf89c071c7b6d
SHA256: 7c2ae9e7d93d6a254d93d4497c754677e7a7b372e3b0ad4cedb2e02df6f30659 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{5ac56584-2304-47b9-b262-8d3164a52d9e}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{5ac56584-2304-47b9-b262-8d3164a52d9e}_OnDiskSnapshotProp.CRAB MD5: a1677530209b4b1ec9b6704700914158
SHA1: 30b2e5c37b08d99b0977aa5c0db28c5ce58d328e
SHA256: e2a6fa74403dda40b7056656dbf84b2df6b07a5583b245a672e9d04c426a0279 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{77ac2c2c-d323-4d07-bbbc-9f6908de6f91}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{77ac2c2c-d323-4d07-bbbc-9f6908de6f91}_OnDiskSnapshotProp.CRAB MD5: 6918f860d73b709159c1711208a9379e
SHA1: ecc4fbe3f2f35e13b09b9c6bdce93663a72b5b84
SHA256: 64e15a055adbe33a59875e706637589a568b42c5866cf37200adb4ca982178cb 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{7a521dbe-9658-44e5-843c-29dd5c50d136}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{7a521dbe-9658-44e5-843c-29dd5c50d136}_OnDiskSnapshotProp.CRAB MD5: 1757915036e33d3117267c635466f7e6
SHA1: 07c50e7167a4997a5eb6a5d9bcdac1674ca3ca60
SHA256: 0a60de3faaecde686fd9c0aa59706b09cc0f4166faca0fe274a59f116ccf588b 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{8000ffcd-1da9-461e-a8a6-b9c248869570}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{8000ffcd-1da9-461e-a8a6-b9c248869570}_OnDiskSnapshotProp.CRAB MD5: 14a59d0c430be97a38d79266860b01e8
SHA1: 0ec798c06477485eb91611c4702e5fe524eb50b3
SHA256: f40c32689e2243dd9649eaa677b126657e9a13dbe401071854c9fb6035e7764d 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{8002c55b-b05c-402e-b80d-41cead61f984}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{8002c55b-b05c-402e-b80d-41cead61f984}_OnDiskSnapshotProp.CRAB MD5: 18a9577c425bb8ebe68c716390ea7cd1
SHA1: e57ee56cbc6fe3daad370cac099e6050dd3fbab1
SHA256: 22c13e56044e2fcbd333015b8a112f3239a11c81bfede8bbbe32c348f91a0a27 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{9069688d-befb-4294-b8a6-15447e1f812d}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{9069688d-befb-4294-b8a6-15447e1f812d}_OnDiskSnapshotProp.CRAB MD5: 07c90bdc5f561bf128315147bcadb3cf
SHA1: c87bfa104dc43ea1650929c495a5858a61798a10
SHA256: 62ae04e30184f4b2bea2d4df272004fc5b5fcbace2bd4593964096805f49e7a7 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{a8f69a00-bbec-42a5-a3ef-bf81814bd449}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{a8f69a00-bbec-42a5-a3ef-bf81814bd449}_OnDiskSnapshotProp.CRAB MD5: 2f3008b9c842669b3329e0a86e140cf7
SHA1: 74d0a73897bde02d1e64980492c40a2ff0cdfbbf
SHA256: ae9eebf5b2570fdba1cb350a78386c25f002f4548a761fa6510470b5cbc214fa 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{b46f41ee-ab11-4c6a-890b-df55c28a4b11}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{b46f41ee-ab11-4c6a-890b-df55c28a4b11}_OnDiskSnapshotProp.CRAB MD5: e110cc46cde60934c083bf9e327de119
SHA1: bccee66677b030c5d9ea911ce69e595f4a98c0bf
SHA256: 3e1a39987f5ca6e3beb232a74bfcabe14b39bbabd5e8be750505b072cdab2ed1 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{bbee4aba-5da4-47f0-bd54-17c95dfb7e64}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{bbee4aba-5da4-47f0-bd54-17c95dfb7e64}_OnDiskSnapshotProp.CRAB MD5: 8515a6bfb1ab1657d97975b098a13ed9
SHA1: 142a1d2e73e399bdfdd1dc64afa2d16c0f029f53
SHA256: 082ea25b063ee939310a53aa3928f2451bc3967916debe8abc4390277a08870e 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{c3f59859-dd84-4710-b6be-740f016ad023}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{c3f59859-dd84-4710-b6be-740f016ad023}_OnDiskSnapshotProp.CRAB MD5: f6bb3c8f884d2ba9f870fa28e6bda3c9
SHA1: 98ef96702a946bb6c5b3e28af753c3cd42fc5628
SHA256: 00fb2ee4817a976eb2002088076504db2ab0cf962fee4234b8ac6d1dbc4884b2 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{c4c23d0f-5069-470f-9760-27eb797f66c2}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{c4c23d0f-5069-470f-9760-27eb797f66c2}_OnDiskSnapshotProp.CRAB MD5: fca313861bbfa28987a37ea1bda2244a
SHA1: 90004af711dfd83ed177f1423ee8cbb309a82158
SHA256: fbd713cf305aae63dcefcd5f9aff1248cb125a0472d060bbebfc1e7b202f9fba 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{c861246c-5d84-4ff4-a753-bad4631d65ca}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{c861246c-5d84-4ff4-a753-bad4631d65ca}_OnDiskSnapshotProp.CRAB MD5: d67fb21bb4be2726af82c6aa69104ae4
SHA1: 610078c24c848dcfc9278a95bf194ca12f6b1e08
SHA256: cfa6514168a24884ea4edd8cb05bb6ec775a33ef46387d7bd450cd32a2743684 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{cb7f5435-7d84-4f72-a889-a21e062f0cb6}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{cb7f5435-7d84-4f72-a889-a21e062f0cb6}_OnDiskSnapshotProp.CRAB MD5: a42c8bb19d34aa9869a3c64978643040
SHA1: 7638dadd79869c1d55403bffbac9f4cd577efa68
SHA256: e6bd1f8bc6a84682eba942ff368c9cf96fcc59b252e33d818769bc2ae2d04253 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{dbab67da-647a-401e-a02b-58c06249c638}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{dbab67da-647a-401e-a02b-58c06249c638}_OnDiskSnapshotProp.CRAB MD5: e3aff356fc8e39401a7a1ee698c80d14
SHA1: e4f331a0373f39e1f387b79927231dcdda273906
SHA256: 8d28cd8088cdd096365fe578611f78dd35bb800ee9ff6feb15fb0d24ac60fbc1 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{ee224d27-954d-4040-87c6-066b5517487c}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{ee224d27-954d-4040-87c6-066b5517487c}_OnDiskSnapshotProp.CRAB MD5: 4c8a437e886f80fcb5de34cf05f0b24a
SHA1: 6c2f36812b79f1cbef1a6ba520a1bfb94d65c79d
SHA256: 8ed473cfaa881979ca454a06cf8b84bb69702a8f825421f6de664d6380c67e9c 		Access, Read, Write
C:\System Volume Information\SPP\SppCbsHiveStore\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\System Volume Information\SPP\SppGroupCache\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\System Volume Information\SPP\SppGroupCache\{00C95144-E912-40B3-A2D1-B8E12BC815D0}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{00C95144-E912-40B3-A2D1-B8E12BC815D0}_DriverPackageInfo.CRAB MD5: 9f87978c134c11e7a7183fc5b1607036
SHA1: 8325168f8d6f69be809898c1bfc24fb0f140d3a4
SHA256: f0b7a81e7944f71540a5f8af317e4b9f85aaae7312035eaf23715c5568ff27e6 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{00C95144-E912-40B3-A2D1-B8E12BC815D0}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{00C95144-E912-40B3-A2D1-B8E12BC815D0}_WindowsUpdateInfo.CRAB MD5: 19da445412c8c73dc32c181a55707856
SHA1: a232cd36a7e3d4395db5aad71e0de46f70706a62
SHA256: 5c3477c36b88b625891ffa3e747f745c324d630eb45c9cdf1d6393f129473862 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{1CE95DD8-C40B-44FD-A9E6-D72D44ED8F39}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{1CE95DD8-C40B-44FD-A9E6-D72D44ED8F39}_DriverPackageInfo.CRAB MD5: 6a31618f117a63f58b9f97b7d35453e7
SHA1: 3574e94548172a427f61409a27f896e1ebc7c1ab
SHA256: 985d90f82633199a0ab56d975ba744afedfade951a90ae864fc4d764b903bdbf 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{1CE95DD8-C40B-44FD-A9E6-D72D44ED8F39}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{1CE95DD8-C40B-44FD-A9E6-D72D44ED8F39}_WindowsUpdateInfo.CRAB MD5: 45f45e928c7449fb416ab428f2a3cb9d
SHA1: 20744a4b0d1cafea08bdb5e749ad32b16fffbed1
SHA256: e9b4a9f8ceac8a72331963ba76cd0cc2d98c449214fcf044774d564dd72c9d48 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{1E9425CC-553B-418F-B0C6-AD1AC9E1BA0C}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{1E9425CC-553B-418F-B0C6-AD1AC9E1BA0C}_DriverPackageInfo.CRAB MD5: b11b6f15b3091043fba2de16b3cf5276
SHA1: a1921215c1764f8f04f74c55c2fd5beca1850c58
SHA256: 4c57e0249f2e7b4eeeb12ba45b17ea5887d15bd4d0d0810f32df7df0ba52bd5e 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{1E9425CC-553B-418F-B0C6-AD1AC9E1BA0C}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{1E9425CC-553B-418F-B0C6-AD1AC9E1BA0C}_WindowsUpdateInfo.CRAB MD5: 98f1d08e61dacb76d35061f186c9b815
SHA1: 6c45f67f560a2282c1e1dd25643fbb051c115ce1
SHA256: af1fa74331d4bb727fbab2ee024644e18f5aba61bcec692874ac0e298d10c180 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{29088C66-DE5F-456F-85C0-6E4156F94358}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{29088C66-DE5F-456F-85C0-6E4156F94358}_DriverPackageInfo.CRAB MD5: c36d78b95ccd93800c4c8a120dd50363
SHA1: a559307202efd4f26fea0c072f45aea37bbbe54c
SHA256: ce6e3df035242337dc69cb23a313f98d7465d2cfb4280d37f1acb5271972610f 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{29088C66-DE5F-456F-85C0-6E4156F94358}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{29088C66-DE5F-456F-85C0-6E4156F94358}_WindowsUpdateInfo.CRAB MD5: 923039bf3129cf9a9a23ad3071b76302
SHA1: c923e061927f0160adf68333c1945fa358cbece2
SHA256: 89ce00cb6cd0abb4855e29dd4742030c12015a0961d10ed68c3502a7cbb56376 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{29296136-1F54-4FD8-B5C7-32FC96EF3C76}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{29296136-1F54-4FD8-B5C7-32FC96EF3C76}_DriverPackageInfo.CRAB MD5: e1e12a97713f7db3d86603368ff3db17
SHA1: 0544fe723b072e1cafe346bd26b88830e73b6b4e
SHA256: 20e24ad1dea771c6f8d499322452fcb9c6421b0a657871a0e5e321e5fdb1f7b4 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{29296136-1F54-4FD8-B5C7-32FC96EF3C76}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{29296136-1F54-4FD8-B5C7-32FC96EF3C76}_WindowsUpdateInfo.CRAB MD5: be91adcb0b3b7802ac3c11c9c2064181
SHA1: 715cce5bff8efe71436fbbc9810bed8cdb623449
SHA256: 011f820e68c969626346b5dc72b569f2c83997223e38603997d5cdcc0bdab8eb 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{4204EE1B-0338-4788-B199-D83E4955FAF1}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{4204EE1B-0338-4788-B199-D83E4955FAF1}_DriverPackageInfo.CRAB MD5: 6127dbf067c0a15c57da5249764eee63
SHA1: 284878cbe8cc00408b97a35f16211748afd6a1fa
SHA256: a73d4be470aae979251e27e4fe603d1a404e594ca37f569710a86e69d70017bf 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{4204EE1B-0338-4788-B199-D83E4955FAF1}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{4204EE1B-0338-4788-B199-D83E4955FAF1}_WindowsUpdateInfo.CRAB MD5: 2a4f18da4cd66471b0a5b61cc05a2758
SHA1: 819b1dacffb483d2ef3c72ac38448f6c342d0279
SHA256: 268c9638fb7d2b4a985aa2cf9b5df43b9422804954dadb54184a511d53bcc674 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{425865B3-1A09-4BE3-8A97-1BAFFDA74ED0}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{425865B3-1A09-4BE3-8A97-1BAFFDA74ED0}_DriverPackageInfo.CRAB MD5: 043e2aa29f5881acaba96f47af0d4f82
SHA1: 27e80922634e2667b50539cf5e0686d3e00738e3
SHA256: 2820eed57e79839343bd1e7001209fa995c7df879ecbb4459f41f95fc366b0ac 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{425865B3-1A09-4BE3-8A97-1BAFFDA74ED0}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{425865B3-1A09-4BE3-8A97-1BAFFDA74ED0}_WindowsUpdateInfo.CRAB MD5: 04a6530ae6a6254cb8c0ac030246c361
SHA1: d0ef8bb615ec1b1b2af57f131b697bff0b5149f8
SHA256: fe5daf985999d62a73458fcacd1c3bf068f4a4105e87a3b387ab41ddb78baa98 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{51296D62-5AA5-412E-9A8F-ABE77CD15E9E}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{51296D62-5AA5-412E-9A8F-ABE77CD15E9E}_DriverPackageInfo.CRAB MD5: 5811677d970681125c5cb2681c82aa71
SHA1: 579c52c20005832c0a898c6dfa00bc68440253e3
SHA256: 450caf5c77a3145971401d12fb94a8cec0dd317279e70475a6403d56602c8b24 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{51296D62-5AA5-412E-9A8F-ABE77CD15E9E}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{51296D62-5AA5-412E-9A8F-ABE77CD15E9E}_WindowsUpdateInfo.CRAB MD5: ccb0e615166dd63eebbe4e55cb024cf0
SHA1: 994491191b3f877910a005e6ba72eb98fd111734
SHA256: 8c6df06c6fb81fb43425cc2e9920f09401d5b049d18790c3bc8e0766e36f26cc 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{5AC56584-2304-47B9-B262-8D3164A52D9E}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{5AC56584-2304-47B9-B262-8D3164A52D9E}_DriverPackageInfo.CRAB MD5: ebaccc5e4096c47e39d3fa9e72370aeb
SHA1: a6c57e314877912a90f5913211c203a4357d1e33
SHA256: 63e9bc8cf042330d5c55be913dbd790e69da37ca29870d8018b713fb4c26df7f 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{5AC56584-2304-47B9-B262-8D3164A52D9E}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{5AC56584-2304-47B9-B262-8D3164A52D9E}_WindowsUpdateInfo.CRAB MD5: d3400b8a3414ace0d5bd79c9c943c99a
SHA1: 8af48328212246c95be3124aa21d88a69b01606e
SHA256: 7ec2998cda9a81cef3c82bfa94d47a594cda603f621afb333bcc6a2c47168d6c 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{77AC2C2C-D323-4D07-BBBC-9F6908DE6F91}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{77AC2C2C-D323-4D07-BBBC-9F6908DE6F91}_DriverPackageInfo.CRAB MD5: caee6f936dd82150816a912a6c7b866d
SHA1: de7352c35e69f41f422f36cb1f36d7cbae0ec5f3
SHA256: 41abce36efafc2889e6150dd00d68347452c81e9495db99a402948291d93a18b 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{77AC2C2C-D323-4D07-BBBC-9F6908DE6F91}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{77AC2C2C-D323-4D07-BBBC-9F6908DE6F91}_WindowsUpdateInfo.CRAB MD5: 85318e05ceecbcddbc60f6cd864947f0
SHA1: 7616a3d93d2c9f498c22d67b4f9505d3c88db658
SHA256: bfd76ae620d5b8f201d307741ea832f8396fc43114e8b47e3d37ee966712eaef 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{7A521DBE-9658-44E5-843C-29DD5C50D136}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{7A521DBE-9658-44E5-843C-29DD5C50D136}_DriverPackageInfo.CRAB MD5: 7cc02ce05dbc7eea76c2b2e5cdfe6dde
SHA1: 1832d6fd7d6127a9f24f223df07ee2dc5f653188
SHA256: 522c3cb75bf6ddcd59f89a323ad1472703f0b59d74f204ebfc58871b524923dd 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{7A521DBE-9658-44E5-843C-29DD5C50D136}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{7A521DBE-9658-44E5-843C-29DD5C50D136}_WindowsUpdateInfo.CRAB MD5: b49ddfd48c08a88733e0bc4767b1e8e0
SHA1: deb4e66802b9f10690bffd526d213fd2ad635ac1
SHA256: 2e541e8df10a7c41c03147cdbe6a69a6c9f16a50a7d646003e7191334543d80d 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{8000FFCD-1DA9-461E-A8A6-B9C248869570}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{8000FFCD-1DA9-461E-A8A6-B9C248869570}_DriverPackageInfo.CRAB MD5: bb4f0525686e26f84f3f0b03edc1f542
SHA1: 8495c0a722627d6cbce177df352dca79a8ea4df2
SHA256: 62694819b946d2df3aa71f6ea085815837f17f2332f8a5e77372579765b61309 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{8000FFCD-1DA9-461E-A8A6-B9C248869570}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{8000FFCD-1DA9-461E-A8A6-B9C248869570}_WindowsUpdateInfo.CRAB MD5: 052c8fb7a53526136a6a9a72cd5d4962
SHA1: 3605b2a7287af0a383eaf34595109e3a7bc01fc2
SHA256: 792242e78c89b516a1379be20db264caecf40eae0d7028453b36cfaa202d7016 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{8002C55B-B05C-402E-B80D-41CEAD61F984}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{8002C55B-B05C-402E-B80D-41CEAD61F984}_DriverPackageInfo.CRAB MD5: c4605bcbc12b0fe348a9f20e4c823e4d
SHA1: 5b0c1e3375f1284d280fde90185608262239174d
SHA256: 4a5dfc0dc55bdb4c211ab7e157fc3272024cb3d3957d70846a83b2b11b556ae1 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{8002C55B-B05C-402E-B80D-41CEAD61F984}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{8002C55B-B05C-402E-B80D-41CEAD61F984}_WindowsUpdateInfo.CRAB MD5: e7b5001129611bae012d39431a444b5a
SHA1: 26a51dc47b997cc65d1ef662f1dbf6f8bd3fd5f6
SHA256: 557c790bd8f1a8f1f0f9275c4b5bd081e7161dd2da6c2b192a2737e9370a59a6 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{9069688D-BEFB-4294-B8A6-15447E1F812D}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{9069688D-BEFB-4294-B8A6-15447E1F812D}_DriverPackageInfo.CRAB MD5: 85b2fd93c9fb2e81fac728403c8314ca
SHA1: eb3c28482a525f75342c0e1da33100d21bdbb0f2
SHA256: 402bb2c07c7ba4b3a91d1bc87e48e8a0083f9d65a2dcdac79ae2be0866db3002 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{9069688D-BEFB-4294-B8A6-15447E1F812D}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{9069688D-BEFB-4294-B8A6-15447E1F812D}_WindowsUpdateInfo.CRAB MD5: 37e4a78c7f1906f94bb441053e290388
SHA1: 9dd0ac84272cdcc40e1327eacc4eeba70b8eafa7
SHA256: 115bb382c4bc6b5ff2d1caea48b275b2c593cf145493a26b71b7511fd5186c07 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{A8F69A00-BBEC-42A5-A3EF-BF81814BD449}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{A8F69A00-BBEC-42A5-A3EF-BF81814BD449}_DriverPackageInfo.CRAB MD5: b5ee6a723355f13bdf5012ffca1d5bfb
SHA1: c27bca69a88051f5e1c7520a6b01e1593f27eb13
SHA256: 2000fb04b1d5909dfa4650662f68cf1bec297e1523b777f495389644da354f96 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{A8F69A00-BBEC-42A5-A3EF-BF81814BD449}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{A8F69A00-BBEC-42A5-A3EF-BF81814BD449}_WindowsUpdateInfo.CRAB MD5: 5226fb400f2965ab80c71fc015b347bf
SHA1: b05f5b5fdada70a497b86b31379dbc84e7a36eac
SHA256: 361f4d20c76d751281a57a3cfe87310b2fcc777285a7acd35c6595fb710a9365 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{B46F41EE-AB11-4C6A-890B-DF55C28A4B11}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{B46F41EE-AB11-4C6A-890B-DF55C28A4B11}_DriverPackageInfo.CRAB MD5: f478dca173ac9be229369aeb95d04f56
SHA1: 0868c8e543232d0a6970eb2b20f0324459a006ca
SHA256: 2286f79f85723ab1937fe2742b1a6a200a0d73d2b3de9f9551b861edbf3b4a46 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{B46F41EE-AB11-4C6A-890B-DF55C28A4B11}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{B46F41EE-AB11-4C6A-890B-DF55C28A4B11}_WindowsUpdateInfo.CRAB MD5: 0e87f0889e1ccec9e14f9160548b67f9
SHA1: 062d7583623de0fd84b3d9f50f998e400bb9469c
SHA256: 8be000810b734419bc3faa2d7905b6b300c3aeb99246396249872046bd11f097 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{BBEE4ABA-5DA4-47F0-BD54-17C95DFB7E64}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{BBEE4ABA-5DA4-47F0-BD54-17C95DFB7E64}_DriverPackageInfo.CRAB MD5: c10fd3163914159ae02dc50e6938a067
SHA1: 5875c6e7fa6888318e8c6bfee8a086cf0d5b3ef4
SHA256: 72d2bc7ea1ec2f1b7b8ef1411bfd4723fe894720cdf15b9476507a572697b47b 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{BBEE4ABA-5DA4-47F0-BD54-17C95DFB7E64}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{BBEE4ABA-5DA4-47F0-BD54-17C95DFB7E64}_WindowsUpdateInfo.CRAB MD5: 12a5b3c5c9535f27c7a4267a3f31ad61
SHA1: 6ef1c8eb337e7a5ed5af462cc90a378f0fbfbd1d
SHA256: a39b6163470d777492878c4473b4727310a1059c94dc22786386f622a0ac0be9 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{C3F59859-DD84-4710-B6BE-740F016AD023}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{C3F59859-DD84-4710-B6BE-740F016AD023}_DriverPackageInfo.CRAB MD5: c0ed7411df033e33e86c148b5ae5c039
SHA1: 7c58489b32a7737bb2b43b88a8d3a053a3b0ba75
SHA256: 07b939c081837cdc6fcbaf6ced7dc0bbeb1fcb5f80d8328e69f4d537558181cd 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{C3F59859-DD84-4710-B6BE-740F016AD023}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{C3F59859-DD84-4710-B6BE-740F016AD023}_WindowsUpdateInfo.CRAB MD5: 1d6543384ca46c9a2c463dfa7c12bb5a
SHA1: 6fc121456187b3b8b2ff0fecdcd403a57395ee1c
SHA256: 44133561dc8c953ff57b1b638db97e5b0d2f933deb98ec1ddc8f24bd34c16d77 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{C4C23D0F-5069-470F-9760-27EB797F66C2}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{C4C23D0F-5069-470F-9760-27EB797F66C2}_DriverPackageInfo.CRAB MD5: e0d65525fe20c295d8a06b71467805af
SHA1: e6578a4ac52d04745f70562e1176a3fe556cc86e
SHA256: f1fc85c3998a750c963cdd64e554f79c069c58b6b72b5b47d7434bc711b84477 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{C4C23D0F-5069-470F-9760-27EB797F66C2}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{C4C23D0F-5069-470F-9760-27EB797F66C2}_WindowsUpdateInfo.CRAB MD5: 4e5ce59c034db39f2a01d0d186856a64
SHA1: c9bc6393b8a822ae9aa7385fdf9424f565e5316c
SHA256: b7526e4b41ad1b518b3ed71f7df4be9f1d852cdb326792194e6c90cba0fcffe7 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{C861246C-5D84-4FF4-A753-BAD4631D65CA}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{C861246C-5D84-4FF4-A753-BAD4631D65CA}_DriverPackageInfo.CRAB MD5: 30a17941e37f0075159d8272bbb07cc4
SHA1: d89d200515d58d015e772f575ff424a8a9e6176a
SHA256: a57dc9625b6cadc928552ab9bd44efe217891abe3aa221613e53eaffee2841c8 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{C861246C-5D84-4FF4-A753-BAD4631D65CA}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{C861246C-5D84-4FF4-A753-BAD4631D65CA}_WindowsUpdateInfo.CRAB MD5: f645fcd2e119804325d04945c84e39a0
SHA1: 3b6a5725d61dc8b08d2a6adbfcfea5860d477130
SHA256: 9af8c8f81569a51ab8b52a3592b44b1ac863c0fefc03c03b8acebb85daca661f 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{CB7F5435-7D84-4F72-A889-A21E062F0CB6}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{CB7F5435-7D84-4F72-A889-A21E062F0CB6}_DriverPackageInfo.CRAB MD5: 648aee9b8c45c6e19ecc2b14560d1367
SHA1: fa5a92df891ad70d776b7348e6cd9871bd54d587
SHA256: ce54a1b7372d01aca9d28b7e324c75a827fb12aad67c06c35dcf9516ce9efdc0 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{CB7F5435-7D84-4F72-A889-A21E062F0CB6}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{CB7F5435-7D84-4F72-A889-A21E062F0CB6}_WindowsUpdateInfo.CRAB MD5: 0c84f0380116d9238bea5251b1a44ab6
SHA1: d2b892093a27348431e9147c4c61e6efe719501b
SHA256: aaa2cb911ace9fed7281355e2f6bbb916363da6154e211c41730831d24286d1d 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{DBAB67DA-647A-401E-A02B-58C06249C638}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{DBAB67DA-647A-401E-A02B-58C06249C638}_DriverPackageInfo.CRAB MD5: 885ec39e4769aada094ea0564e25ece0
SHA1: 86a069bf1e60ed8fc0e13a06ed2ebd0639d694ba
SHA256: eeee435b4776428194e82295ab453d59af7c85e66b8c50d591d49e75ae94224c 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{DBAB67DA-647A-401E-A02B-58C06249C638}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{DBAB67DA-647A-401E-A02B-58C06249C638}_WindowsUpdateInfo.CRAB MD5: 4d66546c474573e921840a00432e0605
SHA1: 47210d0a4fb12007db6608ace5810cbb1c523d76
SHA256: 595fa6fa781a7bfa81baff25c65eee8687d242ff5a0f3dde88448755e422c8c1 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{EE224D27-954D-4040-87C6-066B5517487C}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{EE224D27-954D-4040-87C6-066B5517487C}_DriverPackageInfo.CRAB MD5: 1eae502d87b153796f3fceebe50b00d7
SHA1: d6021b1dd079b974d0c671f35f693fc6a49a0454
SHA256: 92f8dc4fd7e47e4adfca2618ef4db8986b1560897b27f6a6e6f14d5fe0981965 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{EE224D27-954D-4040-87C6-066B5517487C}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{EE224D27-954D-4040-87C6-066B5517487C}_WindowsUpdateInfo.CRAB MD5: f5fdfcbca7111010189a2c6e683a4f96
SHA1: 9afd103780e4860788cf5ce2b56b60d574d415ab
SHA256: 5ed7f4a197566cf7ddbbf8011f1f48fdcdfc1c17d30276d1b78fbfeb25c05bc9 		Access, Read, Write
C:\System Volume Information\Syscache.hve - Access
C:\System Volume Information\Syscache.hve.CRAB MD5: a48b3ad44da5c1e6dacb0152eea108d0
SHA1: 7369b923065b60b87d70e5001d320f4164434321
SHA256: 961382f715025c8c2d58ca4179c2415b116a4495faac6f68b329f2a2a415fdec 		Access, Read, Write
C:\System Volume Information\Syscache.hve.LOG1 - Access
C:\System Volume Information\Syscache.hve.LOG1.CRAB MD5: 267225ce2683fb0787a9b1562f426f98
SHA1: 956d5c666c5f22adb1c9c787da2462e68a51d04a
SHA256: 8e581b283008b88b15c0f89aa768fb12b6ee4685ace62358261cd544f238555c 		Access, Read, Write
C:\System Volume Information\tracking.log - Access
C:\System Volume Information\tracking.log.CRAB MD5: ef0486b165f1908a825f1994b9d38fe6
SHA1: 161696982587bd136b192c4c858eae9cabdd182c
SHA256: 8ca096f87499d4829d3eb59865a19ac12bdccc1e525b7ebaded44186f4519efe 		Access, Read, Write
C:\System Volume Information\{066f465a-4995-11e7-93e9-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{066f465a-4995-11e7-93e9-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{12afb45a-681b-11e7-80b9-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{12afb45a-681b-11e7-80b9-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{12afb45e-681b-11e7-80b9-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{12afb45e-681b-11e7-80b9-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{5a03eaea-6daf-11e7-b9a9-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{5a03eaea-6daf-11e7-b9a9-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{5c1ec902-668e-11e7-870f-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{5c1ec902-668e-11e7-870f-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{7381dc5b-4993-11e7-87dc-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{7381dc5b-4993-11e7-87dc-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{8456a7db-6db1-11e7-9a97-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{8456a7db-6db1-11e7-9a97-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625b7da-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625b7da-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625b905-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625b905-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625bc52-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625bc52-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625bc56-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625bc56-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625bc5a-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625bc5a-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625bc5e-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625bc5e-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625bc62-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625bc62-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625bc66-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625bc66-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625bc84-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625bc84-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625bca0-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625bca0-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{97a6ae5a-521a-11e7-94d2-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{97a6ae5a-521a-11e7-94d2-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{b426f660-7189-11e7-86ab-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{b426f660-7189-11e7-86ab-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{b426f674-7189-11e7-86ab-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{b426f674-7189-11e7-86ab-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{b8daad5a-66a7-11e7-8a16-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{b8daad5a-66a7-11e7-8a16-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{b8daad68-66a7-11e7-8a16-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{b8daad68-66a7-11e7-8a16-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{b8daad8b-66a7-11e7-8a16-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{b8daad8b-66a7-11e7-8a16-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\-DayvP7JqPOz.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\-DayvP7JqPOz.mp3.CRAB MD5: 5d084b9e7051cf7c0ba422cdbab44e66
SHA1: 30c7fd3bebf9cff2fc5e8c1ea6e4d836ca319238
SHA256: 9eea94c5915738bd50ae074fd7284f65a1bf8323da49a30a0764fb2ff2b747c9 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\10sVmj P4.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\10sVmj P4.wav.CRAB MD5: bb5a047427be3894a46e44a244433a90
SHA1: 233d466767a2bcf9112dec083b9d428d549625e1
SHA256: f195961ce564df54a89be47f33b86b2d1fd411059980c3eb88be970cafb9256b 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\31din7ow5vkoebLqCd.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\31din7ow5vkoebLqCd.mp3.CRAB MD5: 4b979229ff33128def4af37f4c815772
SHA1: d921db97036fdd73326919fe3d277934767f3fdb
SHA256: 74fdbe93c517886cfe4313bb09a0365c51dd0a73142e1ce50c006ea9abe9899f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\4DhKp-3wYPgXudWxJ9.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\4DhKp-3wYPgXudWxJ9.jpg.CRAB MD5: 08b1002c09e596fb17ca1e9264f86a53
SHA1: 9052ded8de2e5c4d08f8d5f24c1d63cb7397f490
SHA256: 9e18d3379b0fc4042c04d53a2fa9a07555c78ca0457d14715359c2d70c2c9381 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\4sWrkh0 cpz.ppt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\4sWrkh0 cpz.ppt.CRAB MD5: b9a06851cf93a883f84b91890d857e6e
SHA1: c839d1b8702a58eab9f18bd3d93ea463e6e1217d
SHA256: ed88a11dff4832567fbca075be8685b4bc30611f02c2cc65f7f1e7b79e202f5c 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\5 rDjfI9.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\5 rDjfI9.mp3.CRAB MD5: c44cda7934b75fc717815510fa3e03b2
SHA1: 659a00d945b3b22b2e964a7a5b9e9d57792731bd
SHA256: 82b84217cc235f3102ccbb42b2feedd5fd51e0fbdb62ac3e3eddb96fc305989e 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Collab\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Forms\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js.CRAB MD5: bf0c07a5c127cc7a498f6db4589443f4
SHA1: 8aa30dbe1a14fbcd4a33ee947e6f4a4dbf3c374a
SHA256: 8216a283d7068c94294d239525effecab79db6a29aa53c02bf3987a13e5bdf66 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\addressbook.acrodata - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\addressbook.acrodata.CRAB MD5: be493ec06b6514760750a1dc7136c158
SHA1: 5742fac9d40c4137ec606d17fcb592fe5e1c58ac
SHA256: 6c2a7ae20ead630b64115de740a3f8ab6380ec8364488be4ea2e6152b06715b0 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl.CRAB MD5: f9822443400cdfbb5c0f5eccca562016
SHA1: 0393b07ac7f89f3498f8486e7405e5d2619b2cbd
SHA256: b6edb6c6d4e74900d4cbebbb92f779bbc0052ee6f42c0226353a7002b041d73c 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl.CRAB MD5: 07304fe328136b9775c5a9ffcce0c33d
SHA1: bcb1e1c9c65e3573c39369f53d699d6c16df0768
SHA256: caf42351ed035c73b88a234362df42f6d1a5b7197bba136a13afbbd52670b3cc 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Flash Player\AssetCache\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Flash Player\AssetCache\D5NTRC6R\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Flash Player\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Headlights\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Linguistics\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Linguistics\Dictionaries\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\LogTransport2\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\AR_DzvvYVqXbFC.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\AR_DzvvYVqXbFC.png.CRAB MD5: 8c693fb6a9300fe7bc7534eec1f2e49f
SHA1: f1db85cd47ed74749f3ae03beca5d67c652c1c22
SHA256: 46321b445f789447f0d6e786a50728e3e7d323cbf92322eb9f7c35cc8b5808bc 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\cCayNEnL7P.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\cCayNEnL7P.avi.CRAB MD5: 3af29c020b8edc59ed2b59dfa99c9e47
SHA1: 37a8579ebdc96720634072a7d1febd7a4580f1a2
SHA256: f0515aa6121cdbf0c34ef561cbface9e39e31221ec1d527af47cfa3e65164ce1 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\CI74df8bzh.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\CI74df8bzh.gif.CRAB MD5: dde2703dca5890ec405a6e3b2bb121ec
SHA1: 23128dbbb5099439d0af62fcc36c2ea4730f906e
SHA256: 488b7f301248786133f6223e00938021bdf6a067a9df48e4a50d6ed1e582d7eb 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\DnI50I2_-.odp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\DnI50I2_-.odp.CRAB MD5: 7831eef0d33a85c1422849ebf54a76fa
SHA1: 8a61b1c230b2c552e975f79d46c00082bb1e7871
SHA256: 5a362869b5a5cf1efb065e6b0bdbd81df8f236f58f4b718b0ccd034c915d6920 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\DoCM.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\DoCM.pptx.CRAB MD5: 22ac89218da8d2f2197262138ef05122
SHA1: 45a384855ed3b198031370f501d5ec0cd7078e38
SHA256: ac1670bafd1d184326abaed292e0cf3b042a906d31fff95ef6296e3dcef39d10 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\DXrQjHb s_ge7HCAM.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\DXrQjHb s_ge7HCAM.flv.CRAB MD5: d7191b0ad4baeadd4e780851ab886a03
SHA1: a253dfe5427e30377cbf3aad4f145f5c640be50d
SHA256: 12967ab45ea9d668fab88f23fed7632b20c13899b2a4ec0c0515489795c4bee8 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\eKFqn-s.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\eKFqn-s.mp3.CRAB MD5: c3d5e3eb4ba410cf3ac246666996b575
SHA1: 41bf52d5ef5abf8751783ff52169ef2738765a34
SHA256: 3a4638f00ed5f3f939eefc63c82835b6ee13f01efa46ca8d7eb13566f081e156 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\hR9Jmg2bcuzAyr3E4P.mkv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\hR9Jmg2bcuzAyr3E4P.mkv.CRAB MD5: 9ce85cb5242aa57e8b5bbf48f64c626b
SHA1: 7b861bacf3152a875b8f689c8664c4ea0b667fff
SHA256: 51e26b67cd7b272feadb005ee640a077a9e0f6b80804a6d756edda6db4246454 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Identities\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Identities\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\MA1411.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\MA1411.gif.CRAB MD5: c675d9769b901569fd3ebce3ac9e1d7c
SHA1: f20bfa2339e5d6f80e1cc7ed775da0520413df39
SHA256: d4f0f953aee4260681673af17e158e965ea176b1c67559e7ed1b8a5016178ab2 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\P7Y3F7QB\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol.CRAB MD5: 650ac2f46f9f8e5fa23909367d5c5728
SHA1: 8002fa9f39791e6c30d93531d69b891378b00be0
SHA256: d02630152acbf54403924d21fcd3e7458b10bf2707311cd70c143c3a2697fdb9 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\AddIns\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Credentials\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.CRAB MD5: cb4d53dd1209c60d6d139fce29208dc1
SHA1: 1343fbdc89212689d52fa812a4ec12d251b99a53
SHA256: c921cefe436a7f0f05670da3af6cc86731363f4a3e05bfc56e73267bd1791122 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.CRAB MD5: 5502ec6e87b2de45d62f6332be8199f6
SHA1: f7fb51627cfec3dd0708b080b8f6742bf58448ed
SHA256: b99762bbf47e3fbe830f8d8218160b2c4dbb6b743f008b0521b843c66a787c57 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.CRAB MD5: c03b453dcacf07e2deb0a200c56cf82c
SHA1: 5eac5e245be39c0c3ec37c71d3c5fd665e1b2cc6
SHA256: de709ab4ee971c4ac96ea8db93f9002d9fb0b9708e951850c97c6d69f46fdb26 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\1033\14\Built-In Building Blocks.dotx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\1033\14\Built-In Building Blocks.dotx.CRAB MD5: 757ef6e5460510a3402557c293766bf4
SHA1: adb71cc112bb291e1e95f61bf50dcb64b80a65fd
SHA256: 3edeacb41f9d2bcd57bf2126e551823794dc0af6123e368f7a404d5efcf0f341 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\1033\14\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\1033\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Excel\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Excel\XLSTART\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\IME12\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\IMJP12\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\IMJP8_1\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\IMJP9_0\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\65UX3YG0\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\AY721QDR\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\DZBKZBIC\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\index.dat - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\index.dat.CRAB MD5: 84ff3339427ea77dbdd6cfb60c7e7e89
SHA1: 17431d9bd3c0cbc85c0c588b2adc5368d909acbc
SHA256: e05f6bf6a096fc968b0cd0b9887b020eb47987ecc213e1aa12dc7809f526304f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\VRLZOZ0E\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MMC\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\14\1033\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\14\1033\Global.MPT - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\14\1033\Global.MPT.CRAB MD5: e5d5eb6d72010ef71e1a0a6b19c32597
SHA1: 2db64af5af12cfcc4cbe99a561cc37968d1eecc5
SHA256: f011f54c58783ea0af263e5ef6cd23f4c6f2f79239077a2bfebd903441e9ba1e 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\14\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Network\Connections\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Network\Connections\Pbk\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Network\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\MSO1033.acl - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\MSO1033.acl.CRAB MD5: d9157998fb567453613b63aa2836ebce
SHA1: 91904e8a83202160d4dca2fbd86bdd997727092b
SHA256: 8d77acee6009fe4c1f5b3eb7e0e05ecbb46dd115f03c54706a9455ec4e053777 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\Global.LNK - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\Global.LNK.CRAB MD5: 773f8d031eb25e013dfed25a1c7023e8
SHA1: 9bd8d866ebe2c6bdac7dbfc7380fb2fa3520c728
SHA256: 01e7153bfb2c3053d87ced6be312e32381c879fc04603ea576e7123ed3241705 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\index.dat - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\index.dat.CRAB MD5: 0af895332487bc661d45d02be010f66d
SHA1: 94893d84c12c3bdf4a483f8261a73866ce0c9b58
SHA256: d3724c6755534db045ff24ac02f51df46ea76b445ce0a3e22ae53f03b6d64b6c 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\Templates.LNK - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\Templates.LNK.CRAB MD5: 61c7b805143fb0704d3a555185231a79
SHA1: d0977c47bb87b6e46d1f614ec3759d249eb98967
SHA256: fac5e6028110067c5b7f9efeb0b04120295d57f794b051edc3eaf32dee1896bc 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\Outlook.srs - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\Outlook.srs.CRAB MD5: 8fa95331caa31496f3c873d08b068cb0
SHA1: 4bb71848dd958707b2f14016729ba793f72af48b
SHA256: 59aac2745536e4cfa6595f453318ad26e83f76a5b91743ccb61d6bf3f1613ba8 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\Outlook.xml - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\Outlook.xml.CRAB MD5: 5c56ff4d05aaa5ae2f9dbe2609b0da2d
SHA1: f92135058de7af08dbfaf4126d435606397e454b
SHA256: 2cd95d76c8ebd8696127c90540d365d2a507221999e40b92970b6cf4cf375f1f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\PowerPoint\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Proof\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\CREDHIST - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\CREDHIST.CRAB MD5: 98de7b57ffef53421f5a35b8af147e38
SHA1: fda3aad6f391c20e5089daf6352352aa2e37850e
SHA256: fbcb832a4c686f4c6c5895961b01b41a5340efbf10d695597a85df014aeb98d4 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.CRAB MD5: 42a5cacc1a1c4fa5736b8832214d3638
SHA1: 2d9ec4190cb5176ea639c01ea03353508e28f2ce
SHA256: 107a8b9fdf132a07e5843dcfd19cbc1bd6a27b96d5ceed92b3b599533f37d883 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred.CRAB MD5: 625d17c04b9b8b3483e2dd58f64460c5
SHA1: 267fafff4b76b032c500c5a24954be73dc614e6c
SHA256: c1b4535ff187825d0672335fc6c9047501c1422cb894ab7ab6172eae294a63d2 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\02540a10-7eb7-4b20-a8c7-470f8986389c - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\02540a10-7eb7-4b20-a8c7-470f8986389c.CRAB MD5: fd3d900cf949ba93403fc8ec1f32abc1
SHA1: 70b8774280739583bdf06d8c5b9fe977a2f84d53
SHA256: 5cf3bf17dd009734c497a038378f1b59050cf37b625f63ef206925aaa40b02b5 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\2be989a0-16a1-424b-9211-51aa3bb43e5d - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\2be989a0-16a1-424b-9211-51aa3bb43e5d.CRAB MD5: 1abac21ce7a323f4ac28205869aa0d8e
SHA1: 3068801909a5cb48f047200730e1e1b51fb55814
SHA256: 0683190d5f7671fe2ee45b704adf504d4ad807e73bc64473d7912c9cd75dc49f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\fbbe72db-afd8-443b-88dd-64b20388700d - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\fbbe72db-afd8-443b-88dd-64b20388700d.CRAB MD5: 84d089054a79e1fdbb2453a6c74392aa
SHA1: e67a8907ee4409db9f7ee7f5998ff4eb1f72b938
SHA256: 4d3d9d2a7dcf8f79aec0041d3c1558c3d2217c1f5a91998932d5d518223adc64 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\Preferred - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\Preferred.CRAB MD5: ffc41b633747e1bb6c35f27eb520c50d
SHA1: 80d1f6b72458894782e9f0d7b32bc8ff1cdb2fc5
SHA256: 5f390352d338d0cb2b3dd77ba3134832058473f56acfe2c2bd3169142eff4517 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\SYNCHIST - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\SYNCHIST.CRAB MD5: 2666100bd86d857ec3c069dc08a2c7fa
SHA1: 8d3c334e39e55a8d22f16d09406d7ffb0c5f9b47
SHA256: ceebe162fd487700d0d203d288681ce6f5f8f7544b67e6bbb1ed1b6fa7d5e4a6 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Publisher Building Blocks\ContentStore.xml - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Publisher Building Blocks\ContentStore.xml.CRAB MD5: ba3cd93cf8db2debd9331f825d9541be
SHA1: 63e34c1b5bd3b7b364ba93170e07c6600d225ad1
SHA256: c4d5d8f982a3a2a032afbb621b9b77b3da7683f8581edeab6a51e7c8db7abdbe 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Publisher Building Blocks\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Publisher\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Speech\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Templates\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Templates\Normal.dotm - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Templates\Normal.dotm.CRAB MD5: 90486f059d1d40e406127b92de598212
SHA1: 7bb6172980ccc8ada40943b42c6b55f2fda63ef3
SHA256: 703ae80b1f642b46316f0fae83205e2badd45bfb47ce56e06f4cb5617838612c 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\UProof\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Word\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Word\STARTUP\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Extensions\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Crash Reports\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Crash Reports\InstallTime20131025151332 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Crash Reports\InstallTime20131025151332.CRAB MD5: d128c72f9f35e3ac68663111fbd80ab2
SHA1: cfa14a167bf080695ac9a6a8948a28379a814cf5
SHA256: b46e3c0d14453b19b32777166a9b6ed3f4679c7ed5c77b21b92cfe4218123902 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\profiles.ini - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\profiles.ini.CRAB MD5: 82da87e39c32d14155f112bc11bb68e4
SHA1: c0b2d174bc75e802808866727367f24c02ed8a7d
SHA256: c70a91c0d93c066b498063ea55b0cf0a0d879117371d1857b82420524485ba3f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\addons.json - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\addons.json.CRAB MD5: 86c867015db888331fc4c5465e57266a
SHA1: 9c809691331994961bab075e764b452e5576bacb
SHA256: 2b96cdf9efe85db92ee2812c737acdaf8f0c60b9c5edbb495567dc8e39a70eff 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-05_5.json - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-05_5.json.CRAB MD5: 81fe8e23e9deffdcb6e92549185a973a
SHA1: dfadc3d325425124a45e50c02b38e82c7f42d1eb
SHA256: 8ad5c27ec84d8a0c0c3fe830537090280dd8688c2e23abc00b7a60caab076ff3 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-16_5.json - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-16_5.json.CRAB MD5: 90b47270cb555cbbc296cea6c9addfd6
SHA1: c17b3f9c72af56dee7653b09733bdd710e19ffbe
SHA256: 062c0bdb70fb55f756b3c21708ebcb73a05e701e1f222ce57237fae30497c1ed 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cert8.db - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cert8.db.CRAB MD5: 14a078be26512cf24ee5f14280622993
SHA1: 270ac01ae65bfa4c1ee3f47e7ea3a0e0e0619026
SHA256: 2223250f8465794eab842467bd80d1078467e279864af9bb158252458c38d0fc 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\compatibility.ini - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\compatibility.ini.CRAB MD5: ea46b565ddf6d04af498e805338e215f
SHA1: e248f25c75ce6ba1818534468d41de244c9cd8a6
SHA256: 82090906efe3393c8e8a1e6ef82fede3198b5dfeaebbccccdcb6489af25fc69c 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\content-prefs.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\content-prefs.sqlite.CRAB MD5: cc8e89c2377272d0639a6d3dbbaa889f
SHA1: 051d70886733b8af0269f43c312f98df1f495354
SHA256: a194600707a649166bc2e08ce375563b35d4ac1b059d904407dc50ff0071d7c7 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cookies.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cookies.sqlite.CRAB MD5: c4d76e6549d3c1a25e8174c614b149e5
SHA1: 7ecc761f3320c15f2826a551c4b617fbc58e93f8
SHA256: 0b1386334ef9e17e7721f89fb1574586c0eae03f91c1591529e2cc96c95b271b 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\downloads.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\downloads.sqlite.CRAB MD5: 027d9ce3eeaeb420e886b35721eb1252
SHA1: 293dff56da488e605c844566e2caad54d598d8aa
SHA256: 29d29e8ab9574613e5b902d54a29316acbf16cc43e5bf4f4db3c7766cc98ff3c 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\extensions.ini - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\extensions.ini.CRAB MD5: bd2acb1e29ea5cda2028ba4e08b1dbf8
SHA1: 7da8809d469e355fc37522926d5c623c676cf2e4
SHA256: 710dc776b0804b145a701d6b109970642321d31a19b30901aa85e16c97b4e44f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\extensions.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\extensions.sqlite.CRAB MD5: f1ac8ad5acc5a32194703d5b0507a967
SHA1: 94d809693038e66284e3abfddae14fb142f41e35
SHA256: 2e1ac5423a8514bb150fb9a6d7ca181f70e48a79f1ff2f77842273bc3bd7964a 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht.sqlite.CRAB MD5: 45283cab32710abb6de1b0c4012d4075
SHA1: f8daf36db6630200c04d2872657e540813b2f551
SHA256: 7d9195d46cccbbf7a9927d3cfb5c6d20fdfaa9e1c27521c8233aec6ce3e83caa 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\key3.db - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\key3.db.CRAB MD5: 2f63ae883a30aaf44cc42f1aeaa79681
SHA1: 3f4758c6006bf3a9786a3892a318aef093437557
SHA256: 4d8ed2b4b0f2092bcabb0befd05dbedd4b40aef72be66b31e5830fd344a48d6d 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\localstore.rdf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\localstore.rdf.CRAB MD5: 4767c231f2804478e39d70e74431a001
SHA1: 1fbcaa2d829f22fe27d40cad923644303d6ef3b0
SHA256: 869d936046365e455005af77fa352fe085cb6cb48019b6ee84d918e8fa087a02 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\marionette.log - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\marionette.log.CRAB MD5: 08aa1aaff2e91a13c128826fd7e3d0e4
SHA1: f9779e4d8916a41fa4a213f6c8c165297aaa3b85
SHA256: c0dcc7c60d6fedada954501c5083957614cdf43ca8ead8a9b9d8256f12abfb82 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\mimeTypes.rdf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\mimeTypes.rdf.CRAB MD5: 8189c8d304f9b5fc427f9e94aa02880e
SHA1: 9e95ea8ecea67697e131b0a3c78ac8d09f33b1f3
SHA256: 0fdf6530ffc5f1d9f1ceea1c4edf684a843332591a138f5490ae203bd10f12d5 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\minidumps\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\permissions.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\permissions.sqlite.CRAB MD5: ea5ea997bb452f162101a8f9941e522e
SHA1: 584cecee44b4d8baab2e22a379e7ccbee18d871e
SHA256: 0f6b508bade93ccbfc10fe887761a4812fa5dd63ca76f0d73fb3939e79aed6d5 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\places.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\places.sqlite.CRAB MD5: a899575685473bb51141348668caacc2
SHA1: 52a3f585a5e2e2917da097ce728a856ab4df8f58
SHA256: 85fe3831e48d933d62f1ae85b0a694881bea6a7dad3d89343ef3d9885c55cad0 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\pluginreg.dat - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\pluginreg.dat.CRAB MD5: d4b1c76db04411ac507ef727ccdb9d5f
SHA1: 11c733148227d6c72d9bff9be4a1008e80eeff00
SHA256: 43b94e21cbb24b4f03cceaf6a21be6ebe95f34fb3fd16dd0db70726be25de7f4 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\prefs.js - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\prefs.js.CRAB MD5: 602e47773b1f358d9927c37204a411f9
SHA1: 69df241d8f9586d855cd86f5abb16397fdd943c2
SHA256: dfc3b6883597218813a9b726384bdb551624d0deeb608f8e75c8c6592b534e36 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\search.json - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\search.json.CRAB MD5: c2a03993ad132d0e2c10aa607319e718
SHA1: 342db1c301b32b01e56d327540e50c27b5a0ac2c
SHA256: 71394f666072c7c2048352aa6cacd92ffea171cc96f12f7f676abd5765e1b992 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\secmod.db - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\secmod.db.CRAB MD5: 15e4c2d06aec9f288a80352a210ad020
SHA1: 717400355526d8bdd00d0f12ed652ba134655745
SHA256: cb111816dc34e890c41c5428df7371a1e055f10b95842a85519c8c9af52af6ea 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.bak - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.bak.CRAB MD5: 6e79eb389401618a27b6292be8c143ee
SHA1: cf2ce85de2b5372af96f794af1101e967baa9827
SHA256: f76dea692f738eca184bd31382da994e22a656f8f6bc54067cad71eb1c25f3cb 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.js - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.js.CRAB MD5: edfec2d948ad6a4e90a55383554e4046
SHA1: d413871bdc296563f6d212b442a6229807041049
SHA256: 671ffac7a10c806bd4585468757dddd7d2a7843a631715bb67c62b597f631306 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\signons.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\signons.sqlite.CRAB MD5: 660e1c90377e0e7a11b35e96d4e27ad1
SHA1: 427fb782f870b2a64fd778d8f4ee0973d0ec7400
SHA256: 5d13aa2e08afe40fdb164d9241fe573643cf0d0a59bcf9319af8748f003db5cf 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\times.json - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\times.json.CRAB MD5: 9d82b8c21558455a901c4cad857377f2
SHA1: c48ad5cf1b56d6fe1b3a5313ee5ad54a1259f3d7
SHA256: b069d0fdc15d2ddac7f836b357992f14518a29d725e012cc9b425e0a9e33abea 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\webapps\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\webappsstore.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\webappsstore.sqlite.CRAB MD5: 43dd8ded1a9c58d5e8b8cce30db8f084
SHA1: 6e16ae5b7cd3b30efa8075201d69d6a17752bbe5
SHA256: 3279330dec57bda33b9a491023ff9c25275dc3a15f99380d0354d9cde2be8197 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\n3rDqv5fFoX1Ry_t.mp4 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\n3rDqv5fFoX1Ry_t.mp4.CRAB MD5: 9d5e235cd5d1d6b1134c705c03dbd33c
SHA1: 58dda6958c3c8d47923fc41ff85cc3526622524d
SHA256: cf29988d0ec0c107f4efdee5dc2f8959eba65fc82968214dad62eefcb39424ff 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\n6UK91Wl.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\n6UK91Wl.jpg.CRAB MD5: 31b82047c7e0b879f65690b4604a375f
SHA1: bca61c4204fe707a8b3f70179766ca89a1693dc9
SHA256: f279eeb2b667827ac93fb9935ba6337b5c53ec8973bfc2ee46e496b3c108c946 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\o5Sr.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\o5Sr.mp3.CRAB MD5: 2aa34d387ce002fbafec74cb0b0504cf
SHA1: e8ed3fae8f9ca4139a638400d37e41cd9b5a3a29
SHA256: c6d29ca17a404be81084a91aeb6298dd083cac4f9ceaea25318e05208554f45d 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\OCDQc.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\OCDQc.mp3.CRAB MD5: c99d58f31714b075673673f5ba38c3dd
SHA1: c5e0cca6b50a12454c77e8dd680d4d8de5eee986
SHA256: 82f70bd399c561022a0e1a004735d95359ca8b592852b84f2277c70519a59a4f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\OQ76.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\OQ76.png.CRAB MD5: 553b7299d53d722924e4bdb9abc7f670
SHA1: 1c6828841122aac023e758684da57bd6db6da6cd
SHA256: e27ddfa0196545a25752cdc56afaae952ec68da13056518979ebce01370bbc7f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Q7m4 o69UFJZp0QFw.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Q7m4 o69UFJZp0QFw.gif.CRAB MD5: 8d193c7e891655d56678d9f9a04634a1
SHA1: dc5f6196b707f5e1a82090eaec045f2a09c6d6f6
SHA256: cb635629ba1e3dbf13fa966297982cc5a69428a5cca00ad22a5b1b01177545ca 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\RnyloUvEiOlgFswWxoi.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\RnyloUvEiOlgFswWxoi.bmp.CRAB MD5: 72818685cf6c0e5eafbd78ecd06ae62c
SHA1: 844de1a256bb63de43ffce7a30da74acfa3031de
SHA256: bc7d6e539e14e41d898bd17f097cf8526ffd818dc9fbe490409aae55be33188e 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\SayBusYjAXv.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\SayBusYjAXv.png.CRAB MD5: b02657cb77cbc988e1bb1212def08be3
SHA1: 4f9f941b5664729f11d855052d821d2d4bd3af90
SHA256: fccf3a7db57adb636e9aeca246347a36400324c9af6473a850505848e810fbf8 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\tTlmm _BZQiif.mkv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\tTlmm _BZQiif.mkv.CRAB MD5: 7ad14e2684e6b147fd0429a7d7c8e07a
SHA1: 950ae0a6123c514b2c0aac11401c9fe86dddede6
SHA256: 00b0a930220b3c014d26e00e21ef3316582e789d1f2ec1be5a6a077289613624 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Tz4ATGFHqmeH_XF9.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Tz4ATGFHqmeH_XF9.jpg.CRAB MD5: 71b0c3c5431bb34c6dfad728925e3e66
SHA1: 0f2ee55fa201d8a47b435feae4a3a69ecca63c9a
SHA256: 77814fc4bec788ca4c9897336a23eade9e8568a824caad328d6116ab1e065a5a 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\vI8uu4E.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\vI8uu4E.wav.CRAB MD5: 2aff6c68572905dd5de8c9a6d4c0df62
SHA1: 0f295125d0899ab5968c9a0cea46226451f7c8c8
SHA256: 73740891ecf11a332ba75e10bf4d6d8d8faa9be52160ef1264e596f13d6522d7 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\WEGdsqHxrB6Rl_.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\WEGdsqHxrB6Rl_.mp3.CRAB MD5: 13c33237416074355f12583dd5719287
SHA1: 5b9844ed821b707640b540855532e7f3bbc9bdf0
SHA256: dd8eb43bf0906afb86a6caa98ca3bc3c93c4124b89e340ba34bb0aa73f7fb184 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\wzIZj94sBmPj.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\wzIZj94sBmPj.pptx.CRAB MD5: 0937bbde796805b26c6cdbc2cfdc52e9
SHA1: f09909013256546a24ced542d147f7ce8a61b8b7
SHA256: 1b0a216f123c10b97be54dc672f873faa3f4122be6fac3648141e1517b20a5ac 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Application Data\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Aclviho ASldjfl.contact - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Aclviho ASldjfl.contact.CRAB MD5: 3c62e6568256b62202ff0cb111d52354
SHA1: 400c47ec32ef25d08b58ede17b8c8a53267467eb
SHA256: a7f2dd547a3253bcd27211671fe04c4700c4d04db68192dc14cfce67b8d6979f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Administrator.contact - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Administrator.contact.CRAB MD5: 07fa6fa9f0f74cdffba8508a118f4527
SHA1: d786403dcf50af88b686df1895a7260d62ed7b04
SHA256: 32840dcefc2c05e6d1ff21bc57fd257d17aac31649e6ac88b2f96dc6ccaa7f93 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\asdlfk poopvy.contact - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\asdlfk poopvy.contact.CRAB MD5: cfb965df94a39d808ec215e3133576b8
SHA1: de115022690f24d58df9cd417feae98558f96e42
SHA256: 0a1b36d2acb011e362b42a6ed5f4a37436d472cb5c7381c179c2c6bb1c3f0ce4 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\chucu jadnvk.contact - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\chucu jadnvk.contact.CRAB MD5: 8f0c3ac48dfd826b0c1d611e2e483429
SHA1: cc88be7ab36b62163e689fe00959f560b20aea45
SHA256: 1a12b4963271e6ff13e60624566bd227aca312af703bccc67bea05f4d7097b38 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\lulcit amkdfe.contact - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\lulcit amkdfe.contact.CRAB MD5: ed7358f3dfd1bb0897d75bd8042d64e5
SHA1: 53de044a9d744498d96cd2bf0d4f408c9093aabc
SHA256: 784e65d67e3d1b5e93ed1dc4b19dce335cd4b2fcc46f6cd430ff9c4944ee0349 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\sikvnb huvuib.contact - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\sikvnb huvuib.contact.CRAB MD5: fbca3093d7dc78a6d6f98afdb1c40c94
SHA1: 7369a3133b9efae3fb22085a5a3c03884681f18d
SHA256: 0eb2db41371c7df25d39b154c21a152d026315e5c69cf07ab09901b19f151752 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Cookies\\CRAB-DECRYPT.txt - Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2OGH.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2OGH.gif.CRAB MD5: 8b4bd05aaf0a58ab04cc84ac12ecddc6
SHA1: b9f9de6fb36f722d1538dec66102a55656fd5560
SHA256: 0dc9b5b611f2ae697c7250da821b55ec58934dab9b9a2f4fe84cbbb04a539e6c 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3NFt.mkv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3NFt.mkv.CRAB MD5: 6961c1d08b6f9fd1bf7f63d700c296f5
SHA1: 560af30a92e89f83cf0443e50ef0cba6d4cb1bd4
SHA256: 9461af5d7d7a6cd8a159533c75336d68d5a10e2b3e8a5e5bd7a894eb3c49f7fd 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\4ftsZpMw1g3gL.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\4ftsZpMw1g3gL.avi.CRAB MD5: f86ed3efe389d804d7d451a9b516b983
SHA1: 83903f22065eefa976ec2cbc438650004fe32342
SHA256: f8942032a941c46c4f1595a45e83a6d288dddc34e65864da3f43e9fd960085cf 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\76LU7Z52NxT.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\76LU7Z52NxT.png.CRAB MD5: 982364d93e3fc681db2639f7f049c25d
SHA1: 98e112245bbfd7e3bc2e8b24bd37495c104871ab
SHA256: c6fea0edb587694dd4f6509cb3ad76afe6363d5de90a1f435fedf9fe493fdd2d 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\8kO0NJEBI0t_aH4wR4C.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\8kO0NJEBI0t_aH4wR4C.flv.CRAB MD5: 750653fd2c714f3abddac2fdc2276e1e
SHA1: fdbdd5bf6ab92875dae9375295648aa718f5a502
SHA256: 74d960c7623cb34d72c6359af786d1709899b0b00f6733481cd980304fd8d756 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\94BuT.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\94BuT.bmp.CRAB MD5: ea4ea931afb02f532e6842d13967fced
SHA1: e086fd1cf38179ef1433643206ac268e37285bee
SHA256: 8114163705e2f4c2c929f5ddb8f6e3964230ac61ac6bf027efbb1099cc204d00 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\_bssIabjo1Er7s61_2.rtf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\_bssIabjo1Er7s61_2.rtf.CRAB MD5: 6b0fd9fac217d99b995dfcc3a046ba49
SHA1: 172ce2c098a3c551a4a357222887fac7f4e68cc7
SHA256: 76e9333068f222367fedb5f41f61b68e351281c2d011a4deecb72ed6da58f70d 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\aZfX8HXaYp_3H -la-ai.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\aZfX8HXaYp_3H -la-ai.gif.CRAB MD5: b89beff47c1019b7cff07f2a6c9588b2
SHA1: a01a7c520ecff2d6fbf7cdd8cd10483f8e98b9fb
SHA256: 01a89f7846d5258d6fb852e86c5f789a52065a01fdb88062750e8b1ce8c25b60 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DV_MFjkGN0qANiJ.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DV_MFjkGN0qANiJ.mp3.CRAB MD5: 930fe409bb761ee19f43e1279507825c
SHA1: bec12e62e2b0a9557256dade970a93fdc05ba021
SHA256: 4816096de39cc6b9cf2b33d3b289b4f04aed8fd107fb0d48af27d8227f36d6ac 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\EtiFc2zH--B_1kTHu.pdf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\EtiFc2zH--B_1kTHu.pdf.CRAB MD5: ff9fc0cfc1a2a12b99a41b3bbde180ec
SHA1: 9294b26afbdfc285e2430051c6d35574262193f0
SHA256: 2d685abfed500eee4debb6c1bd02ea60475ecf7fd3a7125bdfd87c9fc7f30d21 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\eTzwqz6GP.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\eTzwqz6GP.wav.CRAB MD5: e54a775da364e096f028c83e98d4414c
SHA1: 276d979332ad6a2002bd64b7bf7a2584b73f02be
SHA256: be8c15591f7ec5d13fb0ef28b57889500d1bf639ae25e873a5c16030815b2ba2 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\fNHcSxfi.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\fNHcSxfi.mp3.CRAB MD5: 2b316ed140103c4a8914ac9df1d030fb
SHA1: b0aadd31a77b0241f7f8698fc30fb20b0a652422
SHA256: 29cc320f48ff44744c1bae2001cdb0812f01614a6b9a8275d2e5329e5b72f0f3 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\g4DSA4yI-juQrohXF.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\g4DSA4yI-juQrohXF.wav.CRAB MD5: 90fd1f9188ade16d2724422a0cd39245
SHA1: 88de64d88d1bd169c7048524bbb31f81c04af690
SHA256: 721bc1ef1fea7a3ff1e710a0963397ffb5b191fff086b7714af6164b4f79148d 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ItpORrGbjc7K7PCQ.pdf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ItpORrGbjc7K7PCQ.pdf.CRAB MD5: f914f2f69b7a14d5f53dccef4f895f68
SHA1: a6bef8ca29e2f21a34367bd02fd2aa63aa3edb16
SHA256: 72cbf6d486489d25234e3919fe1b09e32423322a250974d18dab5864e66f6e64 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\je9RaKcUCm.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\je9RaKcUCm.m4a.CRAB MD5: c00dedb7b47c5dc6bc441ebe2718e295
SHA1: 47d248cdc31f325eb944d562a63509cde16a8e1e
SHA256: 7c4dda48f7e4c736c82e86df026ae7872c14a26ad2077a506d79e1c525386fb8 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\LHQUKhoeIhTRwLpT3UQi.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\LHQUKhoeIhTRwLpT3UQi.swf.CRAB MD5: bac6f0a8fc319aea2a625c335346db3b
SHA1: ee0ad312113240fdda7bcfcbc100b6ac181895bd
SHA256: a864cecc6d29932b1f0ec7379e1150c713aedae4837e856330502dfce9ad3302 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\lVtKRcSlMRhnNAGMnovC.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\lVtKRcSlMRhnNAGMnovC.avi.CRAB MD5: 0a5495d3e7ba88764ebc9085a0ede7ae
SHA1: 8b52c0426d5ed9b055a32b6b5b9e6e356ce6e02d
SHA256: b1d69a2cf14f867643a8173b1a38e3232614b59ce0eb6c94fbe33603e1e7901d 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\MLiKMbL.rtf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\MLiKMbL.rtf.CRAB MD5: 2a369cfff78d7d7349669ff5e3af103a
SHA1: 04335ea65bd226d671b4aad9d708e94d3292dba0
SHA256: f1a03a4572b3a5f60fc276fffeed5f25e5cc5b02a093796971e1fbe114fa382c 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\nIujtiI.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\nIujtiI.avi.CRAB MD5: 580c0b6b167936c92bf8e0789b749128
SHA1: 3011dfbbc61f00be12fa22f9d2c8e9a7454947af
SHA256: 453b8716413a3ea66e62959cbf073c24edc3f687892087a4267cf62e61d162e9 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\SIk0c068 gsVkndwes.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\SIk0c068 gsVkndwes.flv.CRAB MD5: 59cce44a4eaeda43af18b6d4379ed3b0
SHA1: 00c98f680f8a54da9845f742f8f6c37a5493506a
SHA256: 5551e860b61a5e4b5975759ebac1de1ef50a9758c57dab5acab6bc46d9b3855a 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\sYFnn -89NTf68gdMaV.xls - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\sYFnn -89NTf68gdMaV.xls.CRAB MD5: 4120623f1c055d4ccdb2c3c4206a9154
SHA1: e53cbce1b7a54eaf7b709a58df2654255d80fa16
SHA256: a51b1609e33e4bf979363c8d0fdbbceee7670c1d3c4de591ae0592290f692636 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\uEeSzrUjPm-tdWsGKZ.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\uEeSzrUjPm-tdWsGKZ.mp3.CRAB MD5: 8e93953879a3f6f038b47d92803eedaf
SHA1: 93c8b526f1b46fdbecbe99f7b1a9eb8e27b7647d
SHA256: d705a60899290e76db36efe4f23c2067243210e8eb150044c5e36c115b45436a 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\V092xFSO9H2CfEGV6.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\V092xFSO9H2CfEGV6.bmp.CRAB MD5: cdeebdad97bddd9e0eb123f8603a0494
SHA1: 1ef32ddb86093c41bbd8957ffe4b149628e5507d
SHA256: d7b9b17ce689d49146dc24871cf900ca37d02a70d0116abc7cae97ef7d3f401f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Whl7ioH1a1.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Whl7ioH1a1.jpg.CRAB MD5: f3f07d0ef5b9e8470e6dc6db09f7c445
SHA1: d03d5fcde290ffa5fb3696942e2122d53ecc8914
SHA256: bb5c6f6e2458009ec260e7735d838698335cbbf4822c73cac6ebc8d215971ff4 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\0hntmH.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\0hntmH.png.CRAB MD5: efde28a62855b85298e9e72454980823
SHA1: d5f6a702d79f239fff73893c6949e5f53f4a05a6
SHA256: a0daa319ff2fe1fa444f357cd0f2e100d2da6e003575294a79771c36daf9e486 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\C1tx.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\C1tx.mp3.CRAB MD5: 6182fd361c0a4df01f84282618f582d3
SHA1: ffd16957842d7938e934bff8fe562a388ed41366
SHA256: 5d7632b4cc8321fc62c9bd97066aea83f32744c98ca2cfd447c38a9d12cb58a9 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\dp2 xk0V_8T-w0_PfnT\2a-LEH3kNNcEpoRFI7AR.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\dp2 xk0V_8T-w0_PfnT\2a-LEH3kNNcEpoRFI7AR.jpg.CRAB MD5: be0c1e8ac43c38c27b90c484d8753f32
SHA1: 042ba84a9c8a4658a2593d745fc3677e8ab78633
SHA256: 1ebc74071c55f76ce2168e67af0066ff0720a56162e95256a21fa587105104e5 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\dp2 xk0V_8T-w0_PfnT\51DcHy3JNxvL.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\dp2 xk0V_8T-w0_PfnT\51DcHy3JNxvL.gif.CRAB MD5: c8021702b1c6a4ebf1f47367dc4119e7
SHA1: 2050d9b12f08b29faa908a293aed883664f775f1
SHA256: 882df88671c4283755c423636138d1f43a9cd209c03b00ba7038834521ae10c7 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\dp2 xk0V_8T-w0_PfnT\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\dp2 xk0V_8T-w0_PfnT\FP5YUa2nFPMs.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\dp2 xk0V_8T-w0_PfnT\FP5YUa2nFPMs.jpg.CRAB MD5: 00d0515a52fadbc705fc9d72bca09f2f
SHA1: 5308b8a593ff60889c0cc7eb47f52667cf17743f
SHA256: fbb19ff5562bca861143dcd7661770760e717ba0b40d66562d0f98cee07c3224 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\dp2 xk0V_8T-w0_PfnT\GOOFQ22cgu.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\dp2 xk0V_8T-w0_PfnT\GOOFQ22cgu.wav.CRAB MD5: b15f82b323c66d67f92a0503abf463f5
SHA1: a8646d75fb775aca1403afc8fc8b706ea5e2dbae
SHA256: 44852cb15e22680f3ac739e98e700fa724f5418b7ed7132bb1cf9a1f37e07d5d 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\dp2 xk0V_8T-w0_PfnT\JaAUuMCO3cS.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\dp2 xk0V_8T-w0_PfnT\JaAUuMCO3cS.m4a.CRAB MD5: 4343b2d5825a2a51141b2a929792bea7
SHA1: bb456163bc4e907e04bfc32de999212fabea33f0
SHA256: 7c6701a0626abb9a28821f93bccef3bf50523be06cae49a62c8415644e37eeb8 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\dp2 xk0V_8T-w0_PfnT\kgX4.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\dp2 xk0V_8T-w0_PfnT\kgX4.flv.CRAB MD5: 2b08f510c1c38741abe109b8efd025ad
SHA1: e44cfc7a50d8dff9d2dea9ea6767f19d32f2d69e
SHA256: 357e4354776adc2e623648ab214f0c7d1f4670e89c84bf13cbe5c67267db32b9 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\dp2 xk0V_8T-w0_PfnT\LhBc _PrF.ppt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\dp2 xk0V_8T-w0_PfnT\LhBc _PrF.ppt.CRAB MD5: f26a8c249ad030309488d0de647d6864
SHA1: ccfdb83981c85082765bd183db19b0cc3ec355f9
SHA256: 4e402a35742cce1fe0a3bce807901ef66f3aabb401630b226d2f06865f77a7a8 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\I4RoqHAFyJKCzMDS_.mkv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\I4RoqHAFyJKCzMDS_.mkv.CRAB MD5: 083be785326dca5bb8642315729e258b
SHA1: fe4748bfc32331e188132f1451e58bdb19255ff0
SHA256: d33a3c444af527b046cb1a588980412026c0017e48a9a31b97763c68f6751c06 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\jkbwIB639vo5.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\jkbwIB639vo5.gif.CRAB MD5: 1b9b0edb6ec23514c0bea39b3e0ea637
SHA1: 1e00665262b72189618da1f94f3c1c3214fb6de5
SHA256: 50007d9173b8995476e092cb72837f13000699d243cb931b9f9658d3f175921b 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\LrZ9JSM4ynVnONVHq.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\LrZ9JSM4ynVnONVHq.wav.CRAB MD5: fb5552802600c5f7b739411ad4188253
SHA1: a4770b119bc9a65eac15ba1d016407c87cf528a6
SHA256: 5e24c8ecc11a4bb41299d70cf2151588e2213dbe721fced1f80c8dc0155192cf 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\NlX4k_mNAGv84.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\NlX4k_mNAGv84.swf.CRAB MD5: a026f363067137a697b0da527224fe0e
SHA1: 6525dfead83e1b8156ee977baa0bee92ee42f248
SHA256: 6f640968b66cefbe4ab7464cc5e93b2c7797a70fdae6218e02e7347b0e668ac0 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\ry-yusa93pJEt0f7.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\ry-yusa93pJEt0f7.mp3.CRAB MD5: bdcea32cf8c8e646be7589d06625ff05
SHA1: e777e157c90d40c8c66b426a9293fc614e2d5a1a
SHA256: 43528335bc6e3ed0e950cdf7e7719b260ed910460e6324ff01ee9bd241a35545 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\WAYwwcRHKyM5aOVAri7I.odp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\WAYwwcRHKyM5aOVAri7I.odp.CRAB MD5: 136dfd3104fd98a2a1cfb7c82656492f
SHA1: 9ca726e12f6b384330697e80077bd87c0334b7e1
SHA256: a9394a6cfa7ed9f10590901d777957201c3e535f653aa1d4829cb97415cccf97 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\X6 hWpS.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yDTOs3XgmnBA7E33YPzb\X6 hWpS.png.CRAB MD5: 1a38113cdd149f129593de9d26fa19b7
SHA1: ace5a473774ac36fd2547ef228984da9009d98c1
SHA256: 170801b2eb68937faa94190b12a352662883f9fe20408b4f7a46c1bae96e3b3a 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yMwD01eZD.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yMwD01eZD.bmp.CRAB MD5: 822a96037dff071af29b43e90801e8c0
SHA1: 8cd13f513f122083777f65629bdbfbdb81630d3a
SHA256: f607ac8afdeca3895c1e45bb666c7fa23e9e2add09c861a424f967bd7bde96bb 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZVazYW1Y4JPIe.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZVazYW1Y4JPIe.m4a.CRAB MD5: 50b26bbfc1e85ccaec696de76f8de2c5
SHA1: ef97da0f9dd40107f4f929f34617a2090763553b
SHA256: 06e032cad694bd3c4375967a8f30ca5eecc98d8df0bfd14f30299d9806091835 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zxggaoU.mp4 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\zxggaoU.mp4.CRAB MD5: b745c34d2430b6c3099907d748a1ba3b
SHA1: 8883b227e52680a6622c63103768f1ebce0bef90
SHA256: 18297c33f6a90fa7379ad97c9b097654eaa29508d4da146fc1f7593623ca8c71 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\08W494ygrrR2UQM3xN.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\08W494ygrrR2UQM3xN.pptx.CRAB MD5: 7d45f3515e231e2227865eb2fdbc9c0f
SHA1: 11542aa3fceed7e57d7b2e0d4ee0a0609e8dee2c
SHA256: c0f2ba8ff7fbac1b9fad7ec6e76785b09fb7c1a64c81ae67409b0c4fd1c7d621 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\2SBlngwiU-8Y.docx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\2SBlngwiU-8Y.docx.CRAB MD5: 0cb7aaa93e29db742ac0f1b97ec821a1
SHA1: 3247da527070a9188902d1bb32c60bc3dd2c686b
SHA256: 5b20998cfcf1bf0f6ffff8c2bac60a1fdbd4de34bc15ba381fc2592636594814 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\3jDiw_Nhsj.xlsx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\3jDiw_Nhsj.xlsx.CRAB MD5: bdb3e262343b2687fbbbfa3a6013c0f6
SHA1: 1a7826e95f6771009fb690459899374b889686ce
SHA256: c1f4baf744e5ba1705d234fd7a19cc92d52186bfe92dba4648ec439bdcfa6169 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\45cjUXPsWNUYZZ.csv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\45cjUXPsWNUYZZ.csv.CRAB MD5: f3ff9f83ff2318c07f37c05d587c16ee
SHA1: 315ce57c8b6a1466f06e9a2bfef3062c42b398e7
SHA256: 93926198fca664ac07a606d174264eea240061e6c0e2bef28c10aab5336b6453 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4Nyie1u9CnS\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4Nyie1u9CnS\PrFPOmbd.pps - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4Nyie1u9CnS\PrFPOmbd.pps.CRAB MD5: 5c6a9fb3bb23611b3f7bfe7aeaa2f11a
SHA1: ff0d046a7d84272c843d2325d7ccc914a19b5ad7
SHA256: 2ea563192bb45bb2609c36f11466363a02814544dbb671d8142a70cc03df1fdd 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4Nyie1u9CnS\RRYIeD.ots - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4Nyie1u9CnS\RRYIeD.ots.CRAB MD5: f5ca6701ef3b9106bbfcf332118ca6d2
SHA1: 300407c5816cbc00ef037e2ae8aab8af111ef65c
SHA256: 71e6fd55988b08a419cd669c284c726a9c56fccc25b3d268f4893176ededccc8 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4Nyie1u9CnS\wRuHiSpE6u4.csv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4Nyie1u9CnS\wRuHiSpE6u4.csv.CRAB MD5: 0223c4b5a3fa8caac5cee79955fade8e
SHA1: f3e265ba92ddb47e2ef26c34746d48691a292ba9
SHA256: 446af75db081f418a8f4c60eed764b677327e718d6e06a35a0c303ccaaef5a57 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_iy0CK cncf.csv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_iy0CK cncf.csv.CRAB MD5: a5abc2116d8895bb01f3c24b548e25c4
SHA1: edd40ceff3e9dddd2592a2c55d68d6d9d4f0a127
SHA256: c761bcebd6dbd43136376f98c44d2bc9f657fec3e3cb81e7bead9d0ae7496855 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\aNZm9r-6.xlsx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\aNZm9r-6.xlsx.CRAB MD5: fb57aa0e821570a41f4eea9c29008987
SHA1: 3261acef743ec766dd816ca93be7eab0e6c43bae
SHA256: 84a5bca9d9cc25a70f965029f5233b68a0d1057aa7bae2cb7fbd0621fe2e66b2 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\bBmcaUJi9aF\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\bBmcaUJi9aF\I5i-H.csv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\bBmcaUJi9aF\I5i-H.csv.CRAB MD5: c71476cc8c7916da71a20e5c92dbe7f5
SHA1: ff72e7ea2ff3143108a2d9cc982a1ee2623245a3
SHA256: 748f20406ee896c8a8ec22d68eaffaedb9fe9434cc143e961c9948a2f3675028 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\bBmcaUJi9aF\LjtcV9W_leTggwnha.ods - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\bBmcaUJi9aF\LjtcV9W_leTggwnha.ods.CRAB MD5: 0b3531358bf0fcd874bb6e9c79d5878e
SHA1: 77eea9383c28efaaaa9501aebd2608934bb1030a
SHA256: fe530b4018ddb714e24fc3a30c44702a3e9fb66185c36787a3de684d7bc42818 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\bBmcaUJi9aF\WV5O6EW.doc - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\bBmcaUJi9aF\WV5O6EW.doc.CRAB MD5: 32e414464738ff1637af4365ec8a4248
SHA1: 8c32991c2c9c5fb96daf81d2683aa3545c13c0d0
SHA256: caa86d646761b747873b232e02dfb729d22a773dfc09ebaa538836325bfe30db 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\bBmcaUJi9aF\x5ZPZus4kM.doc - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\bBmcaUJi9aF\x5ZPZus4kM.doc.CRAB MD5: cf8c7c67867b35a1830f20e83b606b3d
SHA1: e7f5cec6c8e688145849b9080e2a68c7931eed3b
SHA256: 8302eb7818e50ef9911e875f1ac1b8bfafe1576407a86e3168e257c810bb0aa3 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\CV695_5vq3Zzri.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\CV695_5vq3Zzri.pptx.CRAB MD5: 7d0691685694289a19fd6f738a316c9a
SHA1: d3880854ddc6d3d67d29cb2883f52346ccbb40f6
SHA256: d0d5981e1f60fb99fd836c326c25040eba2ad5b1727d6f80484de9675e9d88bc 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\DyqOvvnqQfnopF.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\DyqOvvnqQfnopF.pptx.CRAB MD5: 6f8af4345f70ee4f1a28c648d8c16d3e
SHA1: cf3456476ed4ebbe25615fca17cd530d977c00c9
SHA256: 6a5e482d1efb254370ceceb2a74f64587e8f7505ed5d0cc2b6d373af7e53f5fd 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\EPBBoe7Ro1v0ShX.docx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\EPBBoe7Ro1v0ShX.docx.CRAB MD5: 36978dd6bd8dc86178537368ba63d40e
SHA1: 3e5504204d05a9bd47764c17f0f5e05a4662e78a
SHA256: 2fabd634cbc232d51cc79714d3b1047cd77ab39bfe94504f93fdda86a0ff4365 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\et5e5Za ixxXB9f30.xlsx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\et5e5Za ixxXB9f30.xlsx.CRAB MD5: c916631f3326963be30bea746cd42ddc
SHA1: c85756e3940cf79242516f58e2dc43c60c2b0013
SHA256: 9a21017522d4528d93f8c7cafcb649f24893dbe26a547102c3b58733bbb71db4 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\HCVI7ZX2o.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\HCVI7ZX2o.pptx.CRAB MD5: f21d7a742c08cbd4485aa974f224bbee
SHA1: 4bbe5cc30046e69583a6cb02f12b627895282847
SHA256: 44f715c906ff1204ff6d445d4d5c77e3f2065f76b266cd93c8f5f137af55cbd2 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\6ha0-v.rtf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\6ha0-v.rtf.CRAB MD5: c15252119fb04604ed411619f49e91c9
SHA1: 921b090fc57467f02284a83b78e3b45f970a68aa
SHA256: 6d33bc6cfa7e0de12ba1174acca5a5ad0589264632ae1a04a3fb910da33ba754 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\E8f8L-CRfhlmsWwyWOn.ods - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\E8f8L-CRfhlmsWwyWOn.ods.CRAB MD5: ab525251471b5b9f25d1d3c51706349d
SHA1: 4b8737d6805438ee1afb57a5a55b3b0d6fd4160a
SHA256: e0a68885cb39e62525510f3d22730a2e8a1053323e6429be2a4b5ca723af1610 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\IMHhzPfLf4hL63ueKPIt.docx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\IMHhzPfLf4hL63ueKPIt.docx.CRAB MD5: 15c74b11f9e0e23e83878d1c3b9a190b
SHA1: 18b5a514953f003b07e5caaf7ea01089d11d68cd
SHA256: 2d9b9599afe17a03ba2c5f0826e8485174a47459132499dafe1ee3a03a38ad83 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\LqdrBI-83PZ4gulxyi.ods - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\LqdrBI-83PZ4gulxyi.ods.CRAB MD5: 1367e14cba26300e866a171214a756e8
SHA1: 87732cd2045bcd5a51b81766d75fc432eb88ffdd
SHA256: d3c339e795f5db233c23a6aa59b6cf9c6ea92e549bd2f0a582c4903af8ed7269 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\bx25n_zEWz.xlsx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\bx25n_zEWz.xlsx.CRAB MD5: b67f3bbd885fd923d0a09c16118eade7
SHA1: 8df403e1ea79490bc595e684135dbb42f4f59ae6
SHA256: fa2ad0b09a54bd6b24a400bbe7a9bde7fdb59361b5222ce92140e9c6b0e52ef9 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\cmJZOujcf.xls - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\cmJZOujcf.xls.CRAB MD5: f6d592deedf0054b86d4fa40a6234246
SHA1: 694deb3ba600409a1da8a5d7960738882a44af41
SHA256: 5ce1fcc0205058783b6c0f570b999cc44c41447977adfade1a9ea2907bd1c05f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\19Yvp6ANDVIkDiFIG.doc - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\19Yvp6ANDVIkDiFIG.doc.CRAB MD5: 899c92c31a1ec4fe67b04449cbc5e445
SHA1: d1d230ef6fc165b733b1f88667ef71443bc79ae1
SHA256: 4f268390a0b826f4d8c84822103344ffce605b05b84b5c23e87307f97db5800d 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\5h7CA4lK26Fq5Gv.ods - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\5h7CA4lK26Fq5Gv.ods.CRAB MD5: 095df4db8537532d8222b1d05f487f75
SHA1: 1b58bb602a6528a170ba55965abac2c955295572
SHA256: b649c37ecf80411caa2c514d193b0f41dd5988301a9f6a631469c4bd24024bf9 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\eVHpoKHeTyOL0r\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\eVHpoKHeTyOL0r\KfXa.ods - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\eVHpoKHeTyOL0r\KfXa.ods.CRAB MD5: 5941ffd74f0f6a86dcff381a9e97f2f3
SHA1: 82680d02867846461fbf21a86f5296b572324f5b
SHA256: 883572873ab9261100c3d9682be23fda9405edcb3628101a474f8d94a554586f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\eVHpoKHeTyOL0r\mUQn.ppt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\eVHpoKHeTyOL0r\mUQn.ppt.CRAB MD5: 2c59346ba9709016161abb63c1bc98db
SHA1: 3a77a13fbf15e6885230a94e0c80b69b209eb56b
SHA256: 47e8f0c8f5fa9f3dc4aee806e50d87afaf45b3e2403f25e99fadba6b94f6a68f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\eVHpoKHeTyOL0r\PBEoEsrTJ9eabu.pdf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\eVHpoKHeTyOL0r\PBEoEsrTJ9eabu.pdf.CRAB MD5: 2987d8ce6abbdc26d7fc4c3b7576fd10
SHA1: 42859a319de0dd677e48b2f7ec5396592a9c1b41
SHA256: df14b4bacb54ef3c5d4f470b36f5f993a83ae3bc3b670069671396075d7cacba 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\eVHpoKHeTyOL0r\PBRm9gO_BYv34r.docx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\eVHpoKHeTyOL0r\PBRm9gO_BYv34r.docx.CRAB MD5: c09f06a59b8fd2a3311531bead6d8d9f
SHA1: b48fae244c887605caead769e338b280088b826c
SHA256: 4d02a052efec7ba1be883f165556cdf06f130817e316a8cfe3fcbd2f50617084 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\eVHpoKHeTyOL0r\QAK6u0jBm85H.pps - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\eVHpoKHeTyOL0r\QAK6u0jBm85H.pps.CRAB MD5: 3deefa56e9038095c2cb0174f3d496be
SHA1: f67f57f40764e9b70bb6d253949d927841cc0325
SHA256: 55306f5e0c1f08763d18b8e87e83c9f82ae5730e29d226a1c42c06ee2fb970ce 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\eVHpoKHeTyOL0r\wOPqVqBS4.ots - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\eVHpoKHeTyOL0r\wOPqVqBS4.ots.CRAB MD5: 5b3b007a762345d971de9dd2bb6a6c28
SHA1: 000b15451317c269b5356bd4aa43f583da86fe21
SHA256: cd5482c1ecc74ec082e5e94e11e1a6164fd392c4cd1f167f0bf8b499c578e721 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\eVHpoKHeTyOL0r\XEXg3o.pdf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\eVHpoKHeTyOL0r\XEXg3o.pdf.CRAB MD5: 7a89423f1e62336a7aae7aa20d617497
SHA1: 9d99aabe4898295b246177295c2e1460906fc06c
SHA256: 9b3c3973b9a09c73fea0a6d84b4a0fd2f8879bb58b52c1ef49c9bb871bb8630e 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\L-9rWH3g90rvx6n.odp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\L-9rWH3g90rvx6n.odp.CRAB MD5: 6c75d66dcec0e169341eb82603cbc20b
SHA1: 5fa10b7ea0fc4248edf424750a48c1241a28615c
SHA256: 5388b3e867e3709d24ac466e846cdfcc9a360f73212d0b397311d4e63d61eca9 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\Odz5x6Cb_LLwBi.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\Odz5x6Cb_LLwBi.pptx.CRAB MD5: 1a8053fd0f08f4370ae5f2abe5ab2f6d
SHA1: ba02f2a54a8ed7940d62dbf7324346b170402437
SHA256: 1b870eab73fb7f402c2ddaf64819d37fc54205c9331e0c15d4612e1c432e53d8 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\S6BPLG0C-Vmy7in3T.xlsx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\e4IA\S6BPLG0C-Vmy7in3T.xlsx.CRAB MD5: 2de24dfd3bf289d461e26e8714be3144
SHA1: 0646a14e80403071fac448b41cd3adb10443d90d
SHA256: 54ac12d72dec4c74e10869946afcc87faffaa49cb5f5eccbaf0cabda13c116b3 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\EwV15du8z.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\EwV15du8z.pptx.CRAB MD5: df8cf6e6f91336926516bc45cee15af5
SHA1: ceca2561c3e9e4bdb4533ce5b846925099d32648
SHA256: 66b4bd5d508bc68a4083938ed26e11e3690a2ab06971c9e66f4e92a5a064907a 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\gt0JBiTNv3SX i75V.pdf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\gt0JBiTNv3SX i75V.pdf.CRAB MD5: f246d7a383a528267e1d1cabd7e19a27
SHA1: 52eb4c6f7de64a5e97d46be06e17272af1688241
SHA256: d93a247f9729b09204063cc405c799ea5845ee11c4f5f58966472e6211ba0677 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\hzs6jyNVZgY-kQaIa.ods - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\hzs6jyNVZgY-kQaIa.ods.CRAB MD5: ea54dc9e95b5f34cbe6deada07e62561
SHA1: a73f2a93e18e0c692042a3e8ec55d8acca47f3c8
SHA256: c1a301eec369c675144843bc4a8a5a9900b87a108fffba0a92baaf92834c07cf 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\j_3PZxyiwO8w.rtf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\j_3PZxyiwO8w.rtf.CRAB MD5: ac8ca9dda35e788eb2fd0ffa6af67347
SHA1: 34ed10d424857143b3aee1cc496f580347a5fe41
SHA256: 6cf894bc21e8167ecd0a4d6310a591154668981623d0f6f87f57d7bad5b6ce9f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\RTDYFjRJhM5Cy.ots - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\RTDYFjRJhM5Cy.ots.CRAB MD5: 98a222b5955e0885ed17752b838c473d
SHA1: ecbd04f7b87225ae0327e49417890f622ee51bf0
SHA256: 1f3139547c79d701a39500aa9ee58b94b15968be2d7a2d60a0e9c42a90f480a4 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\s t6meCIdADoLbUSwk6.pps - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\s t6meCIdADoLbUSwk6.pps.CRAB MD5: e451df945fd0e91dbd5e447a7f50a269
SHA1: 392c739e404f3843c81423dcf2b0f4b89bd68c64
SHA256: af2f548709e95d01e64287e1fee013dc3787436e617d355449b8a9e4a34b009c 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\ZD5GD\aX6Me_QE1X.pdf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\ZD5GD\aX6Me_QE1X.pdf.CRAB MD5: b48db951683a8bf3d3bc780a5302cab1
SHA1: a37922dabddb19bcb8dc90c1c4a1100908040f2e
SHA256: de5f4cd47228b59fbfb948484c143efd03b76c378b176e63ebe0bf2d1763c725 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\ZD5GD\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\ZD5GD\KVmrnWSNH.pps - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\ZD5GD\KVmrnWSNH.pps.CRAB MD5: fb2b64d5033055231d4bedaefbf14598
SHA1: 1100d58be0b4875fe60aa379cb004a16261fadf6
SHA256: ce8e5cd9d60b6de490d5a6413e85b94a5e337b6d26a811e9d35d9e129907624d 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\ZD5GD\qJDSpaff7iaDch.pps - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\ZD5GD\qJDSpaff7iaDch.pps.CRAB MD5: 535fa977fde9803109022215b1328038
SHA1: d438dec76f4ddf67853c19114569d4fbe0a92f3e
SHA256: c5dd0bd318ce461ba02ccbd86b83d8451bd80494c0d583e087919341c1254930 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\ZD5GD\qW66q 1yIljY0F4.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ihfa5ABiYSL\n9f1X\ZD5GD\qW66q 1yIljY0F4.pptx.CRAB MD5: e0bfbf8f8daafd5d3d8d2b8809051abd
SHA1: 97b3adbd8017d76082c1064d78472225d0a4b5b7
SHA256: b33fec69c56f0fdd693195a7908a629113170d939890b8cc36a28fb88d25bab8 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ld_62HyoscOI325O.xlsx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ld_62HyoscOI325O.xlsx.CRAB MD5: e995f401664b86cda276959bc6952f92
SHA1: cbd114be1e2eeaffa0c66b7b6eff857796539f1b
SHA256: c577af09a9f5eb300662b9670cb13970cfd64f76adbc681c7cfc501a06456f2a 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Mkb YyyyeqwKZoQQHy.ods - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Mkb YyyyeqwKZoQQHy.ods.CRAB MD5: 241ce4f363311988031caa3b9c58ebff
SHA1: 9c74562bab152d58253675f5f5572575a843aafa
SHA256: e4929f9c8a8912340cf736d9f025dbc6fa62659ca091be6669eb8d84df02ccc5 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Music\\CRAB-DECRYPT.txt - Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Pictures\\CRAB-DECRYPT.txt - Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Shapes\_private\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Shapes\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Videos\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Ohl4MR.xlsx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Ohl4MR.xlsx.CRAB MD5: b398242c5a614e7b2b8de6d19c4a303b
SHA1: 5d32adba3463984b2d7d327ff2ad830edc21cce7
SHA256: 5930fc87f9d3522aadd8e532d01da4ea03b6b3f5fe84fafbbd9d1f36af423ec7 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\voeimd@djhreuu.uhd.pst - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\voeimd@djhreuu.uhd.pst.CRAB MD5: 4fa8d2e18cc7b9ca03f946292e689b8e
SHA1: f36d748c8273f00ee89b46240ea96462071701ec
SHA256: 1d0311862551a17ddd722de4f068604386227bc6673eeed1199ea4b264618898 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\P6X_pXpgAoA1Ra.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\P6X_pXpgAoA1Ra.pptx.CRAB MD5: afbe16323f3e7c34523b8ca87963da28
SHA1: c50b3f3b13ba7d7439a32943a6d6b65add61ab30
SHA256: ef3ace00a62c60e85f21ac2748ecc559cedc52f59afcb28c90d78a69d4f44ebe 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\spA-_rjrgAuP4BLMuw.docx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\spA-_rjrgAuP4BLMuw.docx.CRAB MD5: 5947cebb01c6ec403557816cac5b2e81
SHA1: 95ac2a81a9290fa3c088843b5ecc07f1971ea53e
SHA256: a4cf278f67657f38fa2624c694eb1a8bd543da870342c133f87ed18ece4e6963 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\sRLr2c5BWRPE.docx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\sRLr2c5BWRPE.docx.CRAB MD5: ed6d3b840a0141bff6c7e62e939b551e
SHA1: e79862643804ec70d61af3c7bfb12998cbdd4645
SHA256: e67239e17b0a00cf0c4f0406be9fd1da3e0982f6ca889f237f5a75b06a4d3990 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\VtAGTwu.docx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\VtAGTwu.docx.CRAB MD5: ca30ad52d688ab93919eb60121b1f757
SHA1: 3786efd85fa69ab255c71e470e2302040a8cb480
SHA256: ed98fe22cbee2a1c522f26ce378a7b6a01c5903b3131634d2606ccfa2c5b308f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Downloads\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Suggested Sites.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Suggested Sites.url.CRAB MD5: 1fd85019b34e62efd8823b69df1fc167
SHA1: 503c5ce897d18320292da85e37c88ed4e6995b1b
SHA256: 22e3cef6b62ae38329927b6c198da7efdf4c57eea0e5150c5fa309d2afef0252 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Web Slice Gallery.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Web Slice Gallery.url.CRAB MD5: 57961868c7ed57980427561f029791fc
SHA1: 75a6947904049bc427cab450d40f31ed76a022c9
SHA256: 9924cdae50de1151638946bafc28952b537427da8d2c02b7e6b638789a0def0e 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE Add-on site.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE Add-on site.url.CRAB MD5: b2ac86960b1dc2d83c1adfd24531a3b0
SHA1: 39cca7dfd13f619c258cf71d9439fca7c36abe52
SHA256: e65947b752171d02fda5d295e2f7d06479ccf4cd120040997253271debba5932 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE site on Microsoft.com.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE site on Microsoft.com.url.CRAB MD5: 419a16fcca3ff68713f95960c81659a2
SHA1: 9c7212f10a109fcf9c337eedf5da3b93d571f7bb
SHA256: 4114ca7e03679055514d3eb18cbe9d96ebe3d8127ce8694b961fa42fef122932 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Home.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Home.url.CRAB MD5: 25376233bd891c3a64f8b7671a051cf3
SHA1: b1f786b9870fb46896a626b2bc7b68afe80e8c34
SHA256: 4ad851489574ab65c959dc8c4dd6f36089f40219573493f015fa2485a9851c8c 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Work.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Work.url.CRAB MD5: b01831065885704051b29409ddb26717
SHA1: cac551350108465642d29228abe4c7cdea0aef5d
SHA256: 81b98e82e07cc64505cfb4145b6cafa1bf3182d33aab08bd498edc95d44b11b7 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft Store.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft Store.url.CRAB MD5: 0949c0904704915c92a54153939b94c9
SHA1: e0490a069753420d7e31e629e6a22db56a56effb
SHA256: 5e7df743548fc1239dabe0f06d99d29c1155bf9c0730da4b5474bd5959841211 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Autos.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Autos.url.CRAB MD5: 03c1a47e94e0b6f901d331d01ded87d3
SHA1: a8049597c71fa8bf2263f5a94950529f1046a27f
SHA256: 2f88b5b1663c6704709dd7b69e9a4e9567b490bd25774edc9f15378e4abedba0 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Entertainment.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Entertainment.url.CRAB MD5: 83715085ffba0d51195b32fe98eceff0
SHA1: f3576eef3eb5efaac469f25293c32ac1507459da
SHA256: 4d7cb6af582ff007d4d78112c9b833f21aa486f0c0e39ff25f77f0ef6f91b9e9 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Money.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Money.url.CRAB MD5: 8f260c5e4c7dce01a92b2907605ac471
SHA1: be0b2ba44db5809f4ae02660393afb9b482d76f4
SHA256: aafc6282d306c93b5afb2fd6bd34429c541b2fbf7a9cbe79a4b9178618ef6e6d 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Sports.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Sports.url.CRAB MD5: aa75849fe617fe0fea07735069dd88e4
SHA1: 757409a20f4daeb8ad3f68a76c685cbd32ca9184
SHA256: 09a84af32e543d6ae92b5ff9bc48ed5d9bc88cba4f0d2af7bace31cdc5145184 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN.url.CRAB MD5: f7027ca8ce27c546df8d4beb2879ec16
SHA1: 4f765129dceb06ef74bbf7281a0bbff9a88fa96c
SHA256: f93577f7f22c1eda67e219fbd41c28e903952429ec1c454266f677e1016e91a3 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSNBC News.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSNBC News.url.CRAB MD5: 6d5f0ac898033ec1225dc4525b795cc1
SHA1: 78044319901f476ca12f58192023d0dab1f6b28c
SHA256: 3e148f5970cd306cf466d68a583dde4cd5feabd496e3ec452381c6a7a4dba9a5 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Get Windows Live.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Get Windows Live.url.CRAB MD5: 5541a4299d155ad2dbe20c300efac8b8
SHA1: 105ebb190c5afdedec351d59bef31fc25cfc0b55
SHA256: 7515c9deba7613c674200662f1775e9917145026bdbd0048ad1c387ed61f0032 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Gallery.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Gallery.url.CRAB MD5: 659a7e8d60a3d5e03ab9aa63a6a56448
SHA1: b423bc7aa7126863e91731ee821f171d409ef6c4
SHA256: e2d95034bc91bbb0999780e6a966d645156a761f482672b398b0e3a50212600c 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Mail.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Mail.url.CRAB MD5: 11ea4dca66fb0d08c81226445fbe93f4
SHA1: e322527d1610ebc85193660311889c0ba83f3b8f
SHA256: 3000250714ece4623d6b51710b164d76b10944413f3e0728216dc40b3ffc44fd 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Spaces.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Spaces.url.CRAB MD5: a13a19348b04b5b0b85552f6cdbe9cdc
SHA1: b5aeeef9a10e5ccdafdfadf4759577a33722afa2
SHA256: d95bca8a4ae2220b0be6ffcaeadd248a487a118f2b10f4ed1faf6623658ee4b4 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Links\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\8n5aqpCDq_A.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\8n5aqpCDq_A.wav.CRAB MD5: e0af1312ea79a4ff9dfd5281ad567f95
SHA1: abf3dbfa58b37880005aece887478a49c17ebad3
SHA256: 7e152eacd12b404cdb5cc002f29d0600257b65f4f68e55f0a07cd81b7e9cbec6 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\1unio5SG06C_y d Xnw.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\1unio5SG06C_y d Xnw.wav.CRAB MD5: 74c0d3a992e36abdabd433065c82e8b7
SHA1: 58472cb7d4d89054640778b9db47d5e72bc47aa1
SHA256: d4ac07203e963b8c92ea36268ce07b4232ce202699b5317574b2e16b64fbb91a 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\ALP_3enOnWOL8 iNu0k.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\ALP_3enOnWOL8 iNu0k.wav.CRAB MD5: 11f2060126f75db80fb4ee57c047f29b
SHA1: 9d73a8d9d624fddebacf84e220f0dd7ea18e661b
SHA256: bd65a947050f94ecfa86b1e2ec846d261a47732301652747e373b7d00c305856 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\3n-hfMjTrkH.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\3n-hfMjTrkH.wav.CRAB MD5: 757077c9952255255bf277ca5cc4bd04
SHA1: 6c356d4f045e02be722316af78346172efc3eee5
SHA256: 7590c68c2d3178db60ee1894cdc60ef99463410c5b02f40f6b145bfbbf3340ab 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\cHVaLnYjymB.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\cHVaLnYjymB.mp3.CRAB MD5: e330320aef6cbd80b12a55b62452b7aa
SHA1: 302ac527fea2e1960ecbe4e260f48a0902ef5583
SHA256: 3c02c98279d68ac5c5aed172623106e74bb01875069d6b014af62a330c026969 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\HHRphAnegwv.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\HHRphAnegwv.wav.CRAB MD5: f8b883de23cfb6e70793aa199bfdc1d9
SHA1: e3cffbbf19992ac421d45438a3b67e8f7a0cef06
SHA256: d11bb38e933855e1fccf5201b8370331db6cb07a4fbb05993e510e378776a750 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\icjLe.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\icjLe.m4a.CRAB MD5: 521c321b23fbbe92b8c99034c13bbdd0
SHA1: c7c8d413500c35463e55c5a61247e3028b49e07d
SHA256: c99d1cc0780120c99dfa59ed8b378338db9c78513ebe3e1614f11cf56d03f7ab 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\Kn_tmM6zw3.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\Kn_tmM6zw3.mp3.CRAB MD5: 78c32f10c56060670c4923a177c84bcb
SHA1: 6b8120a906b0ada23f1d8ce1e70c3ee4bcae56f9
SHA256: 5bf84411a5f46a0ce42392bc092257b7008e4a845a43fca2e4dbd263b6955dd4 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\uM3BQJ8dxr7D.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\uM3BQJ8dxr7D.mp3.CRAB MD5: fa1d0f922010db16490c567a0b94c06a
SHA1: 3d6f2b94c687c4a95caadf9412d3c14325790750
SHA256: 17920830b0e5dcc8ec9c282dd3909bf7c3535c746288131b2921d1199137a3bb 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\Ut43X\aDo6beuoWUshkJscLN.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\Ut43X\aDo6beuoWUshkJscLN.m4a.CRAB MD5: c10860ae1c9dc2b230612758fe12cd01
SHA1: 45b653935ea55e913e6fc6700e826b18f8faeebf
SHA256: a4c7f99e02f15eccdc78b76f432bec332b21660b0ca6c54afc5ef08feba92ef9 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\Ut43X\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\Ut43X\ixvZieErLXMX.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\Ut43X\ixvZieErLXMX.m4a.CRAB MD5: 656475f64e166738600f3426343047ca
SHA1: 84f1068fc5834407b1a454f2f570bd34539ef59b
SHA256: 802e5226932593e6695daa1fdfe8cd26836142aa9739504a946ea9f23eb03993 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\Ut43X\o5mx 1k.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\Ut43X\o5mx 1k.mp3.CRAB MD5: 717d90fa9f1dac053b7241cf2e4b07fb
SHA1: 54326010afe2f7d2c26ff29a5e355435c7a5fa73
SHA256: 0ec16e97031d4522e2efbccb4acde12b611cf8eaaa36bcb3f5de277b924fddd1 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\Ut43X\w-EbBm2RRAB-8PrlGt8u.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\Ut43X\w-EbBm2RRAB-8PrlGt8u.mp3.CRAB MD5: 6f5aa090fdf98eba1e2b1c0e21715e0d
SHA1: d319f5702bdad00cb29e07570f5ab10dd729ebbd
SHA256: a413008e89a80b4cb1e318863d3f02946e06e893770c5f4a5e8654ee4b939789 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\Ut43X\xYTuu-kXIKL5LgiaEv.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\AP2Td3Un4SX\Ut43X\xYTuu-kXIKL5LgiaEv.mp3.CRAB MD5: 103a7c80c5d86e9fd773cd9a127ddcc2
SHA1: 94bc60fe9cf47fe1560c76a6aabf07d7c6662f72
SHA256: 654ba0b34dfd930d3397b502c32d0b58ca7cc63b54612dc12b4cdd19d2679430 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\CS3gDGLDtVe2M-uw.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\CS3gDGLDtVe2M-uw.mp3.CRAB MD5: 59a87717a038a5df9ca55f3b35d449ad
SHA1: e660a653e8f691c720556f34ea80c17ed69de560
SHA256: 004059dbce5f41421e5f1774e53d538546032342d780051fd88cc56a733019f3 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\LyPQjV7PO96e.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\LyPQjV7PO96e.mp3.CRAB MD5: 1a75db050275f82346915b6777891b3d
SHA1: 41207ac516bb4c8ea601413e8eb0088e99be5a1f
SHA256: c13c015247419542db9a499ddbaf7a65243a43e9a501e6b549cc1abb9d5a14ed 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\PPSeV.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\PPSeV.m4a.CRAB MD5: edf8a87a0e6fc2b28041d8e634121612
SHA1: 97d677a5a0b65dec8b25f15bcc3291ad836172b3
SHA256: 3088eda93ccd02763374953ba0453fb1ce2a97b19fcb22d04280b1344631703e 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\2NCRqm0mX6PHLyeD.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\2NCRqm0mX6PHLyeD.mp3.CRAB MD5: bac1096e6c3f96f0ac44d831cb5029fe
SHA1: fdbdc9bfa77adf0a5180b8b0f28b3e12d981b959
SHA256: 04ac20451db3050acb419234d377f59a78a0ca96f93c67990823c1e9253a6385 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\3TQ_ma.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\3TQ_ma.wav.CRAB MD5: dcc05e4c4789dda3124fe3e40658ddcc
SHA1: 98f91c6550c2cba6b252fd6e72f74054f11f9615
SHA256: b1b2fdedb55f74ca09fc6f83f5436f8f78f1a9be78dd2c298cba4b7bc924bd74 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\ceyjelW3O13RpbDjDa.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\ceyjelW3O13RpbDjDa.mp3.CRAB MD5: 5f0cb1bf70fc35081c76e29400cd9730
SHA1: 75df8c1345a491eaf17ac841cb6c8b6137531961
SHA256: 3a4896eed3a381d2bcd101f233089f74bd46821eb7917c516ebb50bb4600d8c4 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\FgwN2ObhM.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\FgwN2ObhM.mp3.CRAB MD5: 3c8a70daf9356fbe33552721e601abb2
SHA1: 3f096f90839c1db05c016c5f876fe323723b4bf5
SHA256: f8dadd3fb0da2b48b9f2f6feac881bc63cf338d1c9ce0907734874437c844f66 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\fJ1WwAMKbwQ2.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\fJ1WwAMKbwQ2.wav.CRAB MD5: 220e99cf033d9f8864dced0646c8bf0a
SHA1: b14e177920f685885489595ac19f8f7e1d07759c
SHA256: c090a4c3ab834df2ac2d8fb488124131fce7d94c93c7a3a3cece58175c21794f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\GZFhWL9G.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\GZFhWL9G.m4a.CRAB MD5: 01f63f3df736b381ddf36f8c0bda0658
SHA1: 260c57cee58134b85822c0a530390b960de2619f
SHA256: 5f8fd46d2bf6849c934d2a8b269cc1f303a7800205b2a14399d97ef2de32d01e 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\VVQF1K6etogvy10qk.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\VVQF1K6etogvy10qk.mp3.CRAB MD5: 0140d1c1e741e3fc2538da8384190974
SHA1: b117cf0d921e748498abb66f6bf8e6a965f45e7e
SHA256: 58e6c4ce97ee40f25ac4355768271517bb78fd3b2b9e315e97a538b6cb3af52e 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\W8BbZpX N5yyTX\71dtLIqFptp6t.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\W8BbZpX N5yyTX\71dtLIqFptp6t.mp3.CRAB MD5: b7bfe472e26dedfa61a5cf0eb699acbe
SHA1: 68fc60486459de26d45fc087dd0d670ffa790209
SHA256: b9364e09411865ee0cf7d9027d93df6e1228616eb96ad72c4bd45d7357dec2d7 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\W8BbZpX N5yyTX\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\W8BbZpX N5yyTX\FoYg3B8-Vkug_.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\W8BbZpX N5yyTX\FoYg3B8-Vkug_.mp3.CRAB MD5: e56393fcc76d5b8b068b3012402b9a34
SHA1: a46d2cbc5dc2376e78b89f6ef3527d8afc46b109
SHA256: 9727e5732245571f3f4c51364ee5600dce9a862508c6b78ed83bf8a97a6b4c10 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\W8BbZpX N5yyTX\PRSTXAg7VrJGp3.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\W8BbZpX N5yyTX\PRSTXAg7VrJGp3.mp3.CRAB MD5: af44322196b6be96193c1aa82154da86
SHA1: a8fcff07d89dbf72ed043dea4bd122942f6facb2
SHA256: 02d374e70f08ea865bdf0698012d0c6acee892deb96b24e2c0d91d0aad11b693 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\W8BbZpX N5yyTX\Zkl31vPQAP.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\bYYPbao200\xCkQAtWjjq975oK9k6\xCSQML_l5A\W8BbZpX N5yyTX\Zkl31vPQAP.m4a.CRAB MD5: 51a668c805bf29e19e217061b8f6a7a6
SHA1: 52a783c69ecf7251c62a9a322f6ac7e56a96c0a3
SHA256: bc2c3a11cabd5f9c92ca923168c63c333f93c5ac571c0c4e9a48e3457a6c5973 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\iu1GhB.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\iu1GhB.m4a.CRAB MD5: c176bf221738cd7d6936dfb208d12254
SHA1: e4df54881d7f217f783db8b28b7e743348cc578a
SHA256: 41eb228175be7576c63ca8907ecda9da4db20388b51c44f28bbd1646c5f543ad 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\vKIdu\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\vKIdu\LQ2R1 pocm.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\vKIdu\LQ2R1 pocm.m4a.CRAB MD5: 12433f020e611313e12a615c6ea69ba9
SHA1: ad8c36db2785c892a63b2453911c5de3177c99af
SHA256: 6644c0a8dea09e35c6eaf911930ec1e8531e249539dfd3ba5db82e2fef2bfaf2 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\vKIdu\SVWbxUJ-ugmt.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\vKIdu\SVWbxUJ-ugmt.wav.CRAB MD5: 4051b961db4841e4f16a6c51e9f90ad8
SHA1: db5fb31da9299847c9e8f1e79a2c5f632bcff7d8
SHA256: ce9678a35543102c026b745aabb5441803c0eb3349c5e6b75e4964fbbf40341d 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\vKIdu\tXVdj.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\vKIdu\tXVdj.m4a.CRAB MD5: e020286fe139247c3a48933ee793f770
SHA1: 84b22a32ff18b5f1e4025ea47d945722da9dff37
SHA256: c526fa4b74f394e2c093670e6c1c98adbd732eee2b7d098b66f13dfd88bbf8f1 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\vKIdu\Z9FFFe9.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\vKIdu\Z9FFFe9.mp3.CRAB MD5: caab724791b0182ffbfd352aac64c76a
SHA1: b0055e34628fa6e2eb288987b4590faca3c44b36
SHA256: 53c9bf9a43320b2b537fb846320cca962a65dab67622622ae0495ff20cebf2d2 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\My Documents\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\NetHood\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.dat.LOG1 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.dat.LOG1.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms - Access
C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms - Access
C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.ini - Access
C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.ini.CRAB MD5: 9669d9edaef8eb1efe0db995da55326a
SHA1: 63bc8d760bcdb711c92292a5a0c101c35cad6fb4
SHA256: cd017f71b983a3dcaf87a61758428e0ce66af825ba9602e443977cc5b9c7cfd9 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\-6fUSHUpsr8FSTTKUq0D.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\-6fUSHUpsr8FSTTKUq0D.png.CRAB MD5: 2552048ea8942956f574bb6607b5e535
SHA1: c6a4ec3ca174b303ceb628d69643776a04d1dd80
SHA256: fc4599fdf757f0715c54a8296c160937709d685baac1f50b278dbd12d94eda8e 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6qQpSiPpNSk.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6qQpSiPpNSk.jpg.CRAB MD5: 1b3f768d8a4137fe376663bfc136ff49
SHA1: 1e22ddce7d575334bde70812cb4d44940656554f
SHA256: 0cd23c8ea98bcfbad0eaa7702152a977c4c8b8427aa95e41cc20f4d9f0ed93de 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\chHqhYmzd.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\chHqhYmzd.bmp.CRAB MD5: 35f8623d92e4f5d947daa304c9f26ade
SHA1: d5edb9f564628b66bf5f40fe102feaaad8a88345
SHA256: e3108a0151a7c1a846cb383e99612d2bb60a5ae1cb6a68388671f66d16a2a8bb 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\_6PB1F31Iq38d fN.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\_6PB1F31Iq38d fN.gif.CRAB MD5: 39b3a822ecff56aecbcc66dd9dd11a07
SHA1: 3594857d7000169399410a3e66bc8f7429dfd13d
SHA256: ebf6beda7b0ebd760398d1b6ed91278b3641c4458df2dd2d646cb1566ef1f909 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\ciFeGEugzG.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\ciFeGEugzG.gif.CRAB MD5: 1488652df893fe03501bd98cc7783355
SHA1: 47cdf873334a624e1fce8f6c4c5f9f3e5d26c733
SHA256: ae4d643f792fe650ffb96cd3a162b51f0a29b1fb113056cdbb4c8193de4dd43d 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\eN5O5aKTd.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\eN5O5aKTd.jpg.CRAB MD5: 1e339bd1e5f7991fa6efc8c4f3b92584
SHA1: c113630fd306543f13c61a9180b17a975086e81d
SHA256: 8a270e1ec7bb49621d5c77d9a255387fdc02df0bca832f050ac5fb3877ff4f68 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\F-CpyxaJutY\6tM CrzEeveh.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\F-CpyxaJutY\6tM CrzEeveh.jpg.CRAB MD5: 9feaaf5a1ec411dcafaba840359db86e
SHA1: 6b2d9a0bd881dd55effacf08c40a8a5b07d1bef8
SHA256: 8cc03544bb9ef47b3f522a82cde97f744b460a03dfde2e305a6fb0aa1fde769f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\F-CpyxaJutY\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\BlrvsT4mPTcJLvoVtV.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\BlrvsT4mPTcJLvoVtV.png.CRAB MD5: 82a98fcd558fd0cd963b4a42dd7d8643
SHA1: 234fe1b0cd9d327f51b67524a93d3c9565aef49d
SHA256: 5118375d82f7a92204a78380332a4b46d8461fd5299618a820a47f27464665de 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\4Vbmi4z7fsuNWh5E.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\4Vbmi4z7fsuNWh5E.gif.CRAB MD5: 47acaa8e51e5a63074c383de8d3d020d
SHA1: 5b2e7c8f9f8f50f109fe12e2c4ef93fd829687f0
SHA256: b234f5c0c782302da50843a9f6830b287159d4a28770c82c485eaddb80675743 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\0R3qIB.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\0R3qIB.jpg.CRAB MD5: 0ecd833bd6f8f92a554577db8966429e
SHA1: 499551d3696328d30b94398daf12fc52ac2cbec3
SHA256: 17bf5dccb5d950cc04ad0cdb2e7106c594c757ed20de9d4deb6e890e3b6319ae 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\ArlbTxBR2FQiKsX5.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\ArlbTxBR2FQiKsX5.bmp.CRAB MD5: df44b632e858c24ffd60f32d9f384021
SHA1: babfb1a5ab55255e32789b301d3b307cb6279ab6
SHA256: 85339a6a1f0dbec0cf0555d9c6e10427448ae161aa5aa62b16976acc570154de 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\fWZWDSH3brhjXb.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\fWZWDSH3brhjXb.bmp.CRAB MD5: fb6660a06328ac2d2c762869a5e2b53c
SHA1: ae0060b21456278afe83961da04a869c385b0dd8
SHA256: 5555e49b7d2fd2b17512c90d0ff256a6dbc2ec02fe004d5d76b2edd180965960 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\JJcQ_oX5i w.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\JJcQ_oX5i w.bmp.CRAB MD5: 253784c425f48168fb27850af7871d71
SHA1: f7fb70d27f65e6db1e56566e5572b3ba7272a840
SHA256: 421982f32d727792065bed8afd52b1abe37ee1cce6c0cefe8c22a9bdddc1887f 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\rfY_dCONpJgk3xeC\-unnSryIlzxHq.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\rfY_dCONpJgk3xeC\-unnSryIlzxHq.png.CRAB MD5: 5882bffc0f152740f76162568f97b6c9
SHA1: 81870419e6c9888268fc90629b5a24d47e563e7d
SHA256: 141fbe8a5197cca969ebdf0f3844c75536e34346844eca290e9c20832405a02e 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\rfY_dCONpJgk3xeC\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\rfY_dCONpJgk3xeC\T_3nACxnQmqJsYbQv75.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\rfY_dCONpJgk3xeC\T_3nACxnQmqJsYbQv75.bmp.CRAB MD5: 96b47bd1ecaf3fa8a7975b98e4f7f621
SHA1: 8ea7cac757e07fedf11b9ef30623483257954e71
SHA256: af44db1c83701305f950056ca59b31f82128867ace472c25d946a66e730d1224 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\S9KYXdU.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\S9KYXdU.gif.CRAB MD5: 9491f5d5e57730f57027291ef09104aa
SHA1: 162e546ac1153e7f42a2ab6da1427414de67adf1
SHA256: e2d70fa51938900fca1f37ea14de216c158cd79ea6a2b85eb6b81aba9e3b7960 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\tdw_upbls-pYdXlK.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\tdw_upbls-pYdXlK.gif.CRAB MD5: 746065c88131162fb1fa15c7bed81ff4
SHA1: d4f893e0d846f804cc4e3c7b70218485882bc868
SHA256: 0eb8bb4b2f378ab938d4bc260759efac3eaac24d033b783daa073f511c3ac2a3 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\vRa-GgFSNFtqGb\_1KXs3qbwtELT4.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\vRa-GgFSNFtqGb\_1KXs3qbwtELT4.png.CRAB MD5: 6686dde0b201aeb2dab1c8b8503d38b8
SHA1: 92a47abc9a325927f5759ee92abfbe02fe39479a
SHA256: cb304e0906efee6778cd12a87b597a80886e1c8f9f532b5cd5625e31879603ac 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\vRa-GgFSNFtqGb\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\vRa-GgFSNFtqGb\ITrClimsmj0dcFOj.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\mWsJT5P5\vRa-GgFSNFtqGb\ITrClimsmj0dcFOj.jpg.CRAB MD5: 123cf2fcdd518f129a07479516700ec2
SHA1: 14afdc80235cbb832891cd2a5afdfb240ae66e52
SHA256: 8218b0a04a58fb1b51380b4775586bf817a9b35b7f73303715f3d278d1fdb726 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\R-TTiU3ApXzSk-uMvp.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\IXlZ1vW89Rj9\R-TTiU3ApXzSk-uMvp.jpg.CRAB MD5: aadcb6d705aa8bccc460a32331b91680
SHA1: 41957aa7a494250b92b692ba960bec4226432730
SHA256: 2277f1ee083e517f60b0b47880ae3b6ea3f7e33d26f155e05af41800106b0f0e 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\qfS5n -.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\URBG52buEjVqoUXZD\zEAuwoyX\qfS5n -.bmp.CRAB MD5: 6e4baedf2cefb7c748640dab05104679
SHA1: a41e76e38ec1188d4ee42f5da11d574e55766f0e
SHA256: 4038ee4e224b694c9f35bc1666bdd3e977a36da6c39e206320a57d1044d1fa5b 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\X1sa80V6zv9l\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\X1sa80V6zv9l\NB5XeyR_9Qv.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\X1sa80V6zv9l\NB5XeyR_9Qv.jpg.CRAB MD5: 4bee8d668f642532563cba417883afa8
SHA1: eee84dcdaee086bdc2e2912367bf5edb866dcc01
SHA256: f7a561eed3b028a3ca4b41f108fc2ef878214764646e77ee702040aed17214cc 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\X1sa80V6zv9l\VHpKu6M.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\X1sa80V6zv9l\VHpKu6M.bmp.CRAB MD5: 035f4ee9210be95be18502eb7cc9400c
SHA1: 0d59624080dced2f9d8de287dd457ff8457e25ee
SHA256: 77dcfabfce9d4e1d47fa3fa764a04914e054daf0c1553e150585492bcb272797 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\X1sa80V6zv9l\X8FCoH MJddf.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\eoea 7EZS8omTG ag\X1sa80V6zv9l\X8FCoH MJddf.bmp.CRAB MD5: e1b4269db63a4d30914a9947557372ab
SHA1: f0db4dc7c844077f1f45bae7fb3f7e558c4952e6
SHA256: b3efe684ee32384584d529317f9d1abd66b5e8d8f1379296f3ddba1aa741e267 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\INLkuecMD1i-hl_.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\INLkuecMD1i-hl_.png.CRAB MD5: da662d0f4411d610613926e7d495c019
SHA1: 5cc18f38519134d1ed0377f238900e3b855d22fc
SHA256: d10b3fe46f8d257353268b1b6414bf57eb430378de0de7c534ee7050d95e8f19 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Z6UQ\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Z6UQ\JDqSVpalc.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Z6UQ\JDqSVpalc.jpg.CRAB MD5: 1dd79e215d3baade7a24f1f1ecce94d3
SHA1: 87010d6749f92af18f53313cb1ad4077aaf14c67
SHA256: d9f6692fdcba44d8619ff0d0ce1b02de5e8255ec7ecbb04786a941ec84903ccb 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Z6UQ\zuGweh5ph-jZ_GzWq_Zm.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\Z6UQ\zuGweh5ph-jZ_GzWq_Zm.jpg.CRAB MD5: 9434fee4f70c63df339ebca225f89c54
SHA1: 5aeb525f945998807602a76561eb8b6e09839cdd
SHA256: c743bcdc7ad75811de7b2581142470081b967814d1f1e1584e72b312810b8595 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\PrintHood\\CRAB-DECRYPT.txt - Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Recent\\CRAB-DECRYPT.txt - Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Saved Games\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Searches\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Everywhere.search-ms - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Everywhere.search-ms.CRAB MD5: 8378781b64f773f2de54024586a875a0
SHA1: 32f569a62687d50dff434d56f21f59f9879cb1bb
SHA256: f05ef4dda6641f4759d41afd5e5b02cdf24c91eecc5845635bd12a1c4aafff7a 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Indexed Locations.search-ms - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Indexed Locations.search-ms.CRAB MD5: 7a39fa261b9613e1780a93f704b01e57
SHA1: 633e23bf50d95d1e4da9c39552bd43f61e75a513
SHA256: bb9acf4918d17c58f3df332fdf43f2a4ba1a6fd65602c82607246c78b37134fe 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\SendTo\\CRAB-DECRYPT.txt - Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Start Menu\\CRAB-DECRYPT.txt - Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Templates\\CRAB-DECRYPT.txt - Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\28tepKgm7SPDM1K.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\28tepKgm7SPDM1K.flv.CRAB MD5: 98f3d02e4e282b1a8ff29b582063f32c
SHA1: 3ccf4ed746e7bd55f4d6a63b0203ef93a01549cd
SHA256: 5ba54be47f6104a4f288c4782c36330b290ed38007ce9b43b7dd54d522fd6311 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\2UjJZGE4.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\2UjJZGE4.avi.CRAB MD5: cf79ec8558dd113dc86eb8e38a44531d
SHA1: 3ab124016cd835b25288617c175ef9ae9ebc3ef7
SHA256: f4370dcfb21e5743b2485507d9cb8fd496a6d5e419fd2c043c94d1c93addd8b9 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\3bCDT YwV3usd.mkv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\3bCDT YwV3usd.mkv.CRAB MD5: 41c70fa999887d235849b45314309fa3
SHA1: 4af7b48e0db2aeb7fd97d4e9319142fab84d240c
SHA256: 97829e817a5d07deda1a4984d41d9fdb4fa0ae4c3c69ffb399fa5eb76aa758d7 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\63G1gdYwD.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\63G1gdYwD.flv.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\_IvAf eF0-.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\_IvAf eF0-.flv.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\ftFUoAxhiA2Sy1x.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\ftFUoAxhiA2Sy1x.flv.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\1HKrkwkqeGiIRmS_sgPp.mkv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\1HKrkwkqeGiIRmS_sgPp.mkv.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\AmUtnF9RuFJnGT6HS.mp4 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\AmUtnF9RuFJnGT6HS.mp4.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\F6tL72B90cRVzNs60ff.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\F6tL72B90cRVzNs60ff.flv.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\FR6vj-T\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\FR6vj-T\IMm8B4ZjBST50PsAyp.mkv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\FR6vj-T\IMm8B4ZjBST50PsAyp.mkv.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\FR6vj-T\lRm54KTIZ5cPvTVr.mkv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\FR6vj-T\lRm54KTIZ5cPvTVr.mkv.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\LqFLgvVe6GQNQyZ.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\LqFLgvVe6GQNQyZ.flv.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\UZ J_r_RGm_h1eMSxK99.mp4 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\UZ J_r_RGm_h1eMSxK99.mp4.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\Xf_Ca2CSNx5V1Nf.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\GkKLAvO_DUt\Xf_Ca2CSNx5V1Nf.avi.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\skbrwB.mp4 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\skbrwB.mp4.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\V1iE651jJI-oldxnkVu.mp4 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\V1iE651jJI-oldxnkVu.mp4.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\VtPSV4Ogd\bEPBqAT-\\CRAB-DECRYPT.txt - Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\VtPSV4Ogd\bEPBqAT-\jYGYRuFd8iRGc_pjE.mkv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\VtPSV4Ogd\bEPBqAT-\jYGYRuFd8iRGc_pjE.mkv.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\VtPSV4Ogd\bEPBqAT-\lDOVgcVD.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\VtPSV4Ogd\bEPBqAT-\lDOVgcVD.avi.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\VtPSV4Ogd\bEPBqAT-\Uvu4BxCkd9Zlg D9xDq\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\VtPSV4Ogd\bEPBqAT-\WQEC-ds0qxud4-_yNrsh.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\VtPSV4Ogd\bEPBqAT-\WQEC-ds0qxud4-_yNrsh.swf.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6rOSLudX8YP\VtPSV4Ogd\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\DFXNGr5HZHKX.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\DFXNGr5HZHKX.avi.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LvM3NnI30UZC9LWbeC6d\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mWR6xwx5-1Jm.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mWR6xwx5-1Jm.flv.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\qiAswr9CaS\8oVaD6rnP6MILA3.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\qiAswr9CaS\8oVaD6rnP6MILA3.flv.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\qiAswr9CaS\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\qiAswr9CaS\gMBI.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\qiAswr9CaS\gMBI.flv.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\qiAswr9CaS\jZ8QdVxL8cDNHwsHZH.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\qiAswr9CaS\jZ8QdVxL8cDNHwsHZH.swf.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\VISGPbj0UIvSr-mjztz.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\VISGPbj0UIvSr-mjztz.flv.CRAB - Access
C:\Users\5P5NRG~1\AppData\Local\Temp - Access
C:\Users\\CRAB-DECRYPT.txt MD5: 41dc497fc38c5cb08ca9943bd5b7e48a
SHA1: aa6c9adcd4f365ebaebc61329eddcfcea2c5076d
SHA256: 6fe46e12f2206dc3c868ccfce0c33c6d1afbb1ef627ccaa8054d53344be44b8d 		Access
C:\Users\Default User\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Application Data\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\History\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Microsoft\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Microsoft\Credentials\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\1NBUR4HR\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\6ASVN7J7\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\D68G7BIJ\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\index.dat - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\index.dat.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\KQMHSVKD\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\Default\AppData\Local\Microsoft\Feeds\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Microsoft\Feeds\FeedsStore.feedsdb-ms - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\FeedsStore.feedsdb-ms.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Home~.feed-ms - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Home~.feed-ms.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Work~.feed-ms - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Work~.feed-ms.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\MSNBC News~.feed-ms - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\MSNBC News~.feed-ms.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Web Slice Gallery~.feed-ms - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Web Slice Gallery~.feed-ms.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\brndlog.bak - Access
C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\brndlog.bak.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\brndlog.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\brndlog.txt.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Microsoft\Media Player\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Microsoft\Media Player\CurrentDatabase_372.wmdb - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\CurrentDatabase_372.wmdb.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\LocalMLS_3.wmdb - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\LocalMLS_3.wmdb.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\01_Music_auto_rated_at_5_stars.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\01_Music_auto_rated_at_5_stars.wpl.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\02_Music_added_in_the_last_month.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\02_Music_added_in_the_last_month.wpl.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\03_Music_rated_at_4_or_5_stars.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\03_Music_rated_at_4_or_5_stars.wpl.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\04_Music_played_in_the_last_month.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\04_Music_played_in_the_last_month.wpl.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\05_Pictures_taken_in_the_last_month.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\05_Pictures_taken_in_the_last_month.wpl.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\06_Pictures_rated_4_or_5_stars.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\06_Pictures_rated_4_or_5_stars.wpl.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\07_TV_recorded_in_the_last_week.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\07_TV_recorded_in_the_last_week.wpl.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\08_Video_rated_at_4_or_5_stars.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\08_Video_rated_at_4_or_5_stars.wpl.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\09_Music_played_the_most.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\09_Music_played_the_most.wpl.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\10_All_Music.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\10_All_Music.wpl.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\11_All_Pictures.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\11_All_Pictures.wpl.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\12_All_Video.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\12_All_Video.wpl.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\edb00001.log - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\edb00001.log.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\WindowsMail.MSMessageStore - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\WindowsMail.MSMessageStore.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\WindowsMail.pat - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\WindowsMail.pat.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb.chk - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb.chk.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb.log - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb.log.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb00001.log - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb00001.log.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edbres00001.jrs - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edbres00001.jrs.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edbres00002.jrs - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edbres00002.jrs.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\oeold.xml - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\oeold.xml.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Bears.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Bears.htm.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Bears.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Bears.jpg.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Garden.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Garden.htm.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Garden.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Garden.jpg.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Green Bubbles.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Green Bubbles.htm.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\GreenBubbles.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\GreenBubbles.jpg.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Hand Prints.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Hand Prints.htm.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\HandPrints.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\HandPrints.jpg.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Orange Circles.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Orange Circles.htm.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\OrangeCircles.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\OrangeCircles.jpg.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Peacock.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Peacock.htm.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Peacock.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Peacock.jpg.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.htm.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.jpg.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Shades of Blue.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Shades of Blue.htm.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\ShadesOfBlue.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\ShadesOfBlue.jpg.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Soft Blue.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Soft Blue.htm.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\SoftBlue.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\SoftBlue.jpg.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Stars.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Stars.htm.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Stars.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Stars.jpg.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\WindowsMail.MSMessageStore - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\WindowsMail.MSMessageStore.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\WindowsMail.pat - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\WindowsMail.pat.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Media\12.0\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.DTD - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.DTD.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML.CRAB - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Media\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\Gadgets\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\Settings.ini - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\Settings.ini.CRAB - Access
C:\Users\Default\AppData\Local\Temp\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Local\Temporary Internet Files\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\LocalLow\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\LocalLow\Microsoft\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B2238AACCEDC3F1FFE8E7EB5F575EC9 - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B2238AACCEDC3F1FFE8E7EB5F575EC9.CRAB - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B2238AACCEDC3F1FFE8E7EB5F575EC9 - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B2238AACCEDC3F1FFE8E7EB5F575EC9.CRAB - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015 - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015.CRAB - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Roaming\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\Default\AppData\Roaming\Identities\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Roaming\Identities\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Roaming\Microsoft\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\Default\AppData\Roaming\Microsoft\Credentials\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Roaming\Microsoft\Crypto\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Roaming\Microsoft\Crypto\RSA\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Roaming\Microsoft\Protect\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Roaming\Microsoft\Protect\CREDHIST - Access
C:\Users\Default\AppData\Roaming\Microsoft\Protect\CREDHIST.CRAB - Access
C:\Users\Default\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9 - Access
C:\Users\Default\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.CRAB - Access
C:\Users\Default\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred - Access
C:\Users\Default\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred.CRAB - Access
C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificates\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificates\My\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Application Data\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Contacts\Administrator.contact - Access
C:\Users\Default\Contacts\Administrator.contact.CRAB - Access
C:\Users\Default\Contacts\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Cookies\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Desktop\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Documents\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Documents\My Music\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Documents\My Pictures\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Documents\My Videos\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Downloads\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Favorites\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Favorites\Links\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Favorites\Links\Web Slice Gallery.url - Access
C:\Users\Default\Favorites\Links\Web Slice Gallery.url.CRAB - Access
C:\Users\Default\Favorites\Microsoft Websites\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Favorites\Microsoft Websites\IE Add-on site.url - Access
C:\Users\Default\Favorites\Microsoft Websites\IE Add-on site.url.CRAB - Access
C:\Users\Default\Favorites\Microsoft Websites\IE site on Microsoft.com.url - Access
C:\Users\Default\Favorites\Microsoft Websites\IE site on Microsoft.com.url.CRAB - Access
C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Home.url - Access
C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Home.url.CRAB - Access
C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Work.url - Access
C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Work.url.CRAB - Access
C:\Users\Default\Favorites\Microsoft Websites\Microsoft Store.url - Access
C:\Users\Default\Favorites\Microsoft Websites\Microsoft Store.url.CRAB - Access
C:\Users\Default\Favorites\MSN Websites\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Favorites\MSN Websites\MSN Autos.url - Access
C:\Users\Default\Favorites\MSN Websites\MSN Autos.url.CRAB - Access
C:\Users\Default\Favorites\MSN Websites\MSN Entertainment.url - Access
C:\Users\Default\Favorites\MSN Websites\MSN Entertainment.url.CRAB - Access
C:\Users\Default\Favorites\MSN Websites\MSN Money.url - Access
C:\Users\Default\Favorites\MSN Websites\MSN Money.url.CRAB - Access
C:\Users\Default\Favorites\MSN Websites\MSN Sports.url - Access
C:\Users\Default\Favorites\MSN Websites\MSN Sports.url.CRAB - Access
C:\Users\Default\Favorites\MSN Websites\MSN.url - Access
C:\Users\Default\Favorites\MSN Websites\MSN.url.CRAB - Access
C:\Users\Default\Favorites\MSN Websites\MSNBC News.url - Access
C:\Users\Default\Favorites\MSN Websites\MSNBC News.url.CRAB - Access
C:\Users\Default\Favorites\Windows Live\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\Default\Favorites\Windows Live\Get Windows Live.url - Access
C:\Users\Default\Favorites\Windows Live\Get Windows Live.url.CRAB - Access
C:\Users\Default\Favorites\Windows Live\Windows Live Gallery.url - Access
C:\Users\Default\Favorites\Windows Live\Windows Live Gallery.url.CRAB - Access
C:\Users\Default\Favorites\Windows Live\Windows Live Mail.url - Access
C:\Users\Default\Favorites\Windows Live\Windows Live Mail.url.CRAB - Access
C:\Users\Default\Favorites\Windows Live\Windows Live Spaces.url - Access
C:\Users\Default\Favorites\Windows Live\Windows Live Spaces.url.CRAB - Access
C:\Users\Default\Links\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Music\\CRAB-DECRYPT.txt - Access
C:\Users\Default\My Documents\\CRAB-DECRYPT.txt - Access
C:\Users\Default\NetHood\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\Default\NTUSER.DAT.LOG1 - Access
C:\Users\Default\NTUSER.DAT.LOG1.CRAB - Access
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf - Access
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.CRAB - Access
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms - Access
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.CRAB - Access
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms - Access
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.CRAB - Access
C:\Users\Default\ntuser.ini - Access
C:\Users\Default\ntuser.ini.CRAB - Access
C:\Users\Default\Pictures\\CRAB-DECRYPT.txt - Access
C:\Users\Default\PrintHood\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Recent\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Saved Games\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Searches\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Searches\Everywhere.search-ms - Access
C:\Users\Default\Searches\Everywhere.search-ms.CRAB - Access
C:\Users\Default\Searches\Indexed Locations.search-ms - Access
C:\Users\Default\Searches\Indexed Locations.search-ms.CRAB - Access
C:\Users\Default\SendTo\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Start Menu\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Templates\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Default\Videos\\CRAB-DECRYPT.txt - Access
C:\Users\Public\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Public\Documents\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Public\Documents\My Music\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Public\Documents\My Pictures\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Public\Documents\My Videos\\CRAB-DECRYPT.txt - Access, Read, Write
C:\Users\Public\Downloads\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Public\Favorites\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Public\Libraries\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Public\Libraries\RecordedTV.library-ms - Access
C:\Users\Public\Libraries\RecordedTV.library-ms.CRAB - Access
C:\Users\Public\Music\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Music\Sample Music\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Public\Music\Sample Music\Kalimba.mp3 - Access
C:\Users\Public\Music\Sample Music\Kalimba.mp3.CRAB - Access
C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3 - Access
C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3.CRAB - Access
C:\Users\Public\Music\Sample Music\Sleep Away.mp3 - Access
C:\Users\Public\Music\Sample Music\Sleep Away.mp3.CRAB - Access
C:\Users\Public\Pictures\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg.CRAB - Access
C:\Users\Public\Pictures\Sample Pictures\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Public\Pictures\Sample Pictures\Desert.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Desert.jpg.CRAB - Access
C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg.CRAB - Access
C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg.CRAB - Access
C:\Users\Public\Pictures\Sample Pictures\Koala.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Koala.jpg.CRAB - Access
C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg.CRAB - Access
C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg.CRAB - Access
C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg.CRAB - Access
C:\Users\Public\Recorded TV\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Public\Recorded TV\Sample Media\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv - Access
C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv.CRAB - Access
C:\Users\Public\Videos\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Videos\Sample Videos\\CRAB-DECRYPT.txt - Access, Write
C:\Users\Public\Videos\Sample Videos\Wildlife.wmv - Access
C:\Users\Public\Videos\Sample Videos\Wildlife.wmv.CRAB - Access
C:\Windows\SysWOW64\svchost.exe - Access
Registry (10)
»
Registry Key Name Operations
HKEY_CURRENT_USER\Control Panel\International Access, Read
HKEY_CURRENT_USER\Keyboard Layout\Preload Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor Access, Read
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System Access
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Scripting Access, Read
Mutex (1)
»
Mutex Name Operations
Global\pc_group=WORKGROUP&ransom_id=e65fbbbf9c354b42 Access
URL (4)
»
URL Operations
http://rated.dadsrnp.xyz/8/7305 GET
ipv4bot.whatismyipaddress.com/ GET
185.183.98.202/eighpheighge?eaph=iezaau POST
185.183.98.202/sceighea POST
IP (1)
»
IP Protocols
185.183.98.202 HTTP, TCP
Export IOCs
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image