RIG EK Drops GandCrab v3.0.1 | IOCs
Logo
Try VMRay Analyzer
VTI SCORE: 100/100
Target: win7_64_sp1 | ie
Classification: Dropper, Trojan, Downloader, Ransomware

http://youtubeconverter.slyip.net/WpLTQb?browser=ie&countryname=United+States

URL

Created at 2018-05-11 13:20:00

...

Notifications (2/4)

Due to a reputation service error, no query could be made to determine the reputation status of any contacted URL.

Some extracted files may be missing in the report since the maximum number of extracted files was reached during the analysis. You can increase the limit in the configuration settings.

Some memory dumps may be missing in the reports since the total dump size limit was reached during the analysis. You can increase the limit in the configuration settings.

One or multiple processes crashed. As a result, the analysis results may be incomplete and may not fully represent the behavior of the sample.

Indicators

File (1310)
»
Filename Hash Operations
b32.exe - Access, Write
C:\$Recycle.Bin\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\bootmgr - Access
C:\bootmgr.CRAB - Access
C:\Config.Msi\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Read, Write
C:\Documents and Settings\\CRAB-DECRYPT.txt - Access, Write
C:\MSOCache\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\PerfLogs\Admin\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\PerfLogs\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Program Files (x86)\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Program Files\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Program Files\Microsoft SQL Server Compact Edition\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\Desktop\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Recovery\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\boot.sdi - Access
C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\boot.sdi.CRAB MD5: 2cec38c1d334b4aa2522512dcd24c18f
SHA1: f66ebde14fdd76d334395979dae499f3bedf9738
SHA256: c1d6cbc9fc70d1652e00b4106947b31129cd42c13c082e3d6b14a6ab64e5250c 		Access, Read, Write
C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\Winre.wim - Access
C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\Winre.wim.CRAB MD5: 5e4bbe6272835f45190a7b735c3091d1
SHA1: 7aaa8c3792fd12bc76c0780a0183143f338c046c
SHA256: f899185b99ebc772e9d71bb71f0bbbb100b13ec321f15423053faf18f4ab3d0e 		Access, Read, Write
C:\System Volume Information\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\System Volume Information\SPP\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\System Volume Information\SPP\OnlineMetadataCache\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{00c95144-e912-40b3-a2d1-b8e12bc815d0}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{00c95144-e912-40b3-a2d1-b8e12bc815d0}_OnDiskSnapshotProp.CRAB MD5: 3e6edfac03332e7e2c56816ed1723540
SHA1: 61430c3943ecd8bc719c0387bf517acd4c01b173
SHA256: 8a14380163ac90d74004061ce53bd2de68d2cfd676fd991b1cef4666e0591c90 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{1ce95dd8-c40b-44fd-a9e6-d72d44ed8f39}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{1ce95dd8-c40b-44fd-a9e6-d72d44ed8f39}_OnDiskSnapshotProp.CRAB MD5: a54aebc3110f8ffff83a0a2d6d1b229b
SHA1: 9ae37167b6cd8f79364b3e102832bb9f3cece342
SHA256: aa675210533d518209259ccdcc59aa6afa8766994a1341b7f1afb5bc1f932e01 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{1e9425cc-553b-418f-b0c6-ad1ac9e1ba0c}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{1e9425cc-553b-418f-b0c6-ad1ac9e1ba0c}_OnDiskSnapshotProp.CRAB MD5: 54b21b8373e75f2e3501ce82ecc1d048
SHA1: 9c7b523224293d71c4c86c75440a39c4aca3f087
SHA256: 7823c383234279f526925ed6ef2968082a32cd77690fffe4932086608a4a716f 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{29088c66-de5f-456f-85c0-6e4156f94358}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{29088c66-de5f-456f-85c0-6e4156f94358}_OnDiskSnapshotProp.CRAB MD5: 30c9bb57fb7a6213c4633e5749c39362
SHA1: a69fb77c07e33315452896cf0578da683b49d8e9
SHA256: f578af7e0ce9f9d7d3073b111e8e9c277f72184b4d2cdfb3b2adced41be3e04b 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{29296136-1f54-4fd8-b5c7-32fc96ef3c76}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{29296136-1f54-4fd8-b5c7-32fc96ef3c76}_OnDiskSnapshotProp.CRAB MD5: 33d23a8886c98ddb35562f2248900046
SHA1: 3f9fd6d6c8238fb94a2ed74945c226431be943e4
SHA256: e00d87a0ad48502fc8c2d47a00d1ee11e879904e411eb0c2e56659ff0fbf42cf 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{4204ee1b-0338-4788-b199-d83e4955faf1}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{4204ee1b-0338-4788-b199-d83e4955faf1}_OnDiskSnapshotProp.CRAB MD5: 06476c9a1e2de80b2c578c911051685d
SHA1: e5682e1b0bb261f965d9509e961f67ffef424526
SHA256: c71eefff35c64678d4b1de8979b3e40243bddaa939a0cd024b5d8faac7a1ce13 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{425865b3-1a09-4be3-8a97-1baffda74ed0}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{425865b3-1a09-4be3-8a97-1baffda74ed0}_OnDiskSnapshotProp.CRAB MD5: 5d561f7df3e609f73208f3251870a249
SHA1: 715c03deff23da67e219462586286f47925ca0f8
SHA256: 9927225620453bc2b3b85e3ed686833e55c87a4294b910ae48af6ce86b672546 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{51296d62-5aa5-412e-9a8f-abe77cd15e9e}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{51296d62-5aa5-412e-9a8f-abe77cd15e9e}_OnDiskSnapshotProp.CRAB MD5: 683d852cef0ba6c4d6f207f592647b23
SHA1: b6e14166333709828bca34ccf5579ac844aab452
SHA256: b291686b0fd11017cb5093d800677c3b4e2bd6bb2e03553f1f5bec59845087ca 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{5ac56584-2304-47b9-b262-8d3164a52d9e}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{5ac56584-2304-47b9-b262-8d3164a52d9e}_OnDiskSnapshotProp.CRAB MD5: e520ded96d789e49c6897d23fd5aca23
SHA1: 0028a3fe5944d4e26ae43079464bd2fe8b3a9c24
SHA256: b747b7e72eb5fd5e5de9d8db65669e86942b474b4be180220d4a49c544fb5ae2 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{77ac2c2c-d323-4d07-bbbc-9f6908de6f91}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{77ac2c2c-d323-4d07-bbbc-9f6908de6f91}_OnDiskSnapshotProp.CRAB MD5: a46e0f5b3e0317913bae4139ed43ea75
SHA1: acfdeafb69ec414c56a0521da4383c1ad4e6c35b
SHA256: bf9e0ac8d4e761576c6b44fe502788ff8a50f58e03783e0b98fed5a1f6950e56 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{7a521dbe-9658-44e5-843c-29dd5c50d136}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{7a521dbe-9658-44e5-843c-29dd5c50d136}_OnDiskSnapshotProp.CRAB MD5: 720cee68a61b206a018308077dfb60af
SHA1: 4e49370e48174b7920b4cd1646248937529da164
SHA256: af17c4dfa0c09d85279d234f043dddb37ab3c07745e942bfc23feff435e622e6 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{8000ffcd-1da9-461e-a8a6-b9c248869570}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{8000ffcd-1da9-461e-a8a6-b9c248869570}_OnDiskSnapshotProp.CRAB MD5: 90c6a691d807188bcdb3cbe6fc0b8632
SHA1: 11d2e9c870a11695e951c5673db2b83f7b5937d2
SHA256: 7d5e4a0675802673cbdc8149cab7cd72eef4c5b94d1e4388f3e843124ff4e59d 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{8002c55b-b05c-402e-b80d-41cead61f984}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{8002c55b-b05c-402e-b80d-41cead61f984}_OnDiskSnapshotProp.CRAB MD5: 5368d37774c586a49b18082b4a824976
SHA1: a5bd0afd77730e591f44a5e7ddd1cb5519cd5712
SHA256: 84ff4c8539d00e37171890d5d24cf6707d361ac3fdad30adaeed4fb0fdd2f846 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{9069688d-befb-4294-b8a6-15447e1f812d}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{9069688d-befb-4294-b8a6-15447e1f812d}_OnDiskSnapshotProp.CRAB MD5: ed20e28c67b2fa1182f795a493b48dbc
SHA1: 83db7ed57cee960a34320b3fe4f334073d1ade14
SHA256: fc42927488ab6bd0e446e254bf5a36b59b560392e10e6c94446e192aa1ca1c9f 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{a8f69a00-bbec-42a5-a3ef-bf81814bd449}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{a8f69a00-bbec-42a5-a3ef-bf81814bd449}_OnDiskSnapshotProp.CRAB MD5: c7c0c4e49d347fc84de67173428575ca
SHA1: 5c24a08d6c6a76e11d37581504050bf0aa301bff
SHA256: 04c4a47184fafca9f3d10d26a01bf5da65f11ac4839c1fb764613d7e7d7d071a 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{b46f41ee-ab11-4c6a-890b-df55c28a4b11}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{b46f41ee-ab11-4c6a-890b-df55c28a4b11}_OnDiskSnapshotProp.CRAB MD5: cc0ec8691e5b290695dc899f78c3f5fd
SHA1: 920f59e60abc7d8fc3ad36b6badd718658bc4058
SHA256: 471bbc9698c602ceb3ce7c86fbd1d6b717460b870befa0d850c2d56373f03388 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{bbee4aba-5da4-47f0-bd54-17c95dfb7e64}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{bbee4aba-5da4-47f0-bd54-17c95dfb7e64}_OnDiskSnapshotProp.CRAB MD5: 1f474232564b1d7f72496ec63d63afb9
SHA1: d1892e1173f98d69a53aafb9f9ba7095a48faed3
SHA256: b4bd14ee62907763fd29c680204f21ab249a146798df492ddbffdf8e681577f5 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{c3f59859-dd84-4710-b6be-740f016ad023}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{c3f59859-dd84-4710-b6be-740f016ad023}_OnDiskSnapshotProp.CRAB MD5: 36148c24039582fab4559d59e27c66c2
SHA1: 32506f24e6c3a2e8b421dac12e1b2fcf4b9c6bbe
SHA256: 5620141a0c06a3f52872a41149ff088b76801975d8c4c9a737d9a0d146c1537a 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{c4c23d0f-5069-470f-9760-27eb797f66c2}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{c4c23d0f-5069-470f-9760-27eb797f66c2}_OnDiskSnapshotProp.CRAB MD5: 646426473683121cd785a1c7ef1243b2
SHA1: 5ebb0dee0584828f19cee95a972c5ee606e53001
SHA256: fb3c8b93a6c843be580f6a595d10381a61b080d8ab719b7295498f2a970e88b8 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{c861246c-5d84-4ff4-a753-bad4631d65ca}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{c861246c-5d84-4ff4-a753-bad4631d65ca}_OnDiskSnapshotProp.CRAB MD5: 6d7c77de89891c46ecb49e928edc4e98
SHA1: c9921fbc9b5fe89381699def02f4c966a9e2f42f
SHA256: fe42ac8da8158c4008db9505bce3ca6fca23512b761161568d39c6f991add957 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{cb7f5435-7d84-4f72-a889-a21e062f0cb6}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{cb7f5435-7d84-4f72-a889-a21e062f0cb6}_OnDiskSnapshotProp.CRAB MD5: ae4b784eabeafa53cbe40b04e4d2e6cd
SHA1: 842874b93af04e1ef182699eaebfb2db1bf9a613
SHA256: fa9190f21848396107fe3fc8678866e22bda98d2e1bbcf81c8094d27a3dc48e7 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{dbab67da-647a-401e-a02b-58c06249c638}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{dbab67da-647a-401e-a02b-58c06249c638}_OnDiskSnapshotProp.CRAB MD5: 78c3e1c04362b9821f586eef8ce96a0a
SHA1: c68d40f86c357191a4ab0a81331e9091a719867d
SHA256: 2e303407dae1eab073b8613b3a23f5928c28128d535586a309ae54ffc5a4ab23 		Access, Read, Write
C:\System Volume Information\SPP\OnlineMetadataCache\{ee224d27-954d-4040-87c6-066b5517487c}_OnDiskSnapshotProp - Access
C:\System Volume Information\SPP\OnlineMetadataCache\{ee224d27-954d-4040-87c6-066b5517487c}_OnDiskSnapshotProp.CRAB MD5: 2dfeefae7e2dc11e9e98b16407601fe7
SHA1: b549c3feebf9868e2793772037b2280a80ff3fa1
SHA256: 2ecd6c8882c129f9561cacc1f15062401490671c7845b2ed0aca2f97d6eed08f 		Access, Read, Write
C:\System Volume Information\SPP\SppCbsHiveStore\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\System Volume Information\SPP\SppGroupCache\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\System Volume Information\SPP\SppGroupCache\{00C95144-E912-40B3-A2D1-B8E12BC815D0}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{00C95144-E912-40B3-A2D1-B8E12BC815D0}_DriverPackageInfo.CRAB MD5: 4d0864f478da72580b95358e7051489e
SHA1: cdcbcb67007517543104ff03ede8db945a600d6d
SHA256: 75eaf0a09c9748dbdbd46448b39667b06523fbf13772d845b992f9afa3f8df1e 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{00C95144-E912-40B3-A2D1-B8E12BC815D0}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{00C95144-E912-40B3-A2D1-B8E12BC815D0}_WindowsUpdateInfo.CRAB MD5: 155badf7b90787f363a5ef93b2176851
SHA1: 2527e993fd45362c70e812800d2a6c719a5d3e7b
SHA256: 9d2f9d72572c8221f1d22c178facf038f10398e80d9fe39fe9f822f6270ad00a 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{1CE95DD8-C40B-44FD-A9E6-D72D44ED8F39}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{1CE95DD8-C40B-44FD-A9E6-D72D44ED8F39}_DriverPackageInfo.CRAB MD5: 37ccfd2610b40c8fbc4d79b118a16164
SHA1: 7bcc7a85daf2b76c0991eb19022cd460e755d362
SHA256: a732568dfbecd59e3a138c4d107c5714de3e62bde268dffe897c638edbb32d41 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{1CE95DD8-C40B-44FD-A9E6-D72D44ED8F39}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{1CE95DD8-C40B-44FD-A9E6-D72D44ED8F39}_WindowsUpdateInfo.CRAB MD5: 1bb24c2ff4afa3b43a7be6d34f2e38a6
SHA1: 6e5087d519048bf86b009db4d041e6f3d00e510c
SHA256: 935c60492df40f9b79aa56adf866fd9c885198cbacecea2406f78776079bfeca 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{1E9425CC-553B-418F-B0C6-AD1AC9E1BA0C}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{1E9425CC-553B-418F-B0C6-AD1AC9E1BA0C}_DriverPackageInfo.CRAB MD5: 558702ece22fad5a66fab601f5d0d720
SHA1: f1fbaabcfc6cfaceb34182f6f55a5c6f6bb56174
SHA256: 4f62c75bcca5c97be8b83394d955be8cd6a5f916bcfb25ca77a84c7f7d5eca8a 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{1E9425CC-553B-418F-B0C6-AD1AC9E1BA0C}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{1E9425CC-553B-418F-B0C6-AD1AC9E1BA0C}_WindowsUpdateInfo.CRAB MD5: 12a3010cd25aaca20814483449170917
SHA1: d99fd37b7e2a6d1426ec00714bffaf08be8796bc
SHA256: 54f0aa32c1fbb8ed214c144a09e014d938c0772229b869e4fac4000d7ea618a3 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{29088C66-DE5F-456F-85C0-6E4156F94358}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{29088C66-DE5F-456F-85C0-6E4156F94358}_DriverPackageInfo.CRAB MD5: c776033df67dc57b104fcce49cfd4687
SHA1: be07cdb7ea02e9d3e327c585478aa447e52edec6
SHA256: 0f3f4c87330e7d215f1aa20470ee015ec468185e5b2c5704abfdabb580d84caf 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{29088C66-DE5F-456F-85C0-6E4156F94358}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{29088C66-DE5F-456F-85C0-6E4156F94358}_WindowsUpdateInfo.CRAB MD5: 2ac19e9d6ae2bd7aefd449d014b3cc2a
SHA1: 829db42ae6476add9681bc70bd76b930c60af064
SHA256: 4b02c10cb7dd38c3b7e941f18fd176635453cc617055dfd3dd8c313d8991b6f4 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{29296136-1F54-4FD8-B5C7-32FC96EF3C76}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{29296136-1F54-4FD8-B5C7-32FC96EF3C76}_DriverPackageInfo.CRAB MD5: 81b5360b3becb75c5bc01912b2ce3188
SHA1: 0007da4d775acc177c1621d1a9504c737181c2aa
SHA256: 146014c676af336c6bb7499d0fab793d7d787ecb6a7b9bb5059ca994f03ecd59 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{29296136-1F54-4FD8-B5C7-32FC96EF3C76}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{29296136-1F54-4FD8-B5C7-32FC96EF3C76}_WindowsUpdateInfo.CRAB MD5: e13f4a2303ad654544365c3fd900f8f1
SHA1: cef492647f07b1fe6218d8930da0378f791817fe
SHA256: 25034cd46cb5fdfea35a3b1d89ed17c57b22ba4e50ccd8059d05ec3179d5a32a 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{4204EE1B-0338-4788-B199-D83E4955FAF1}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{4204EE1B-0338-4788-B199-D83E4955FAF1}_DriverPackageInfo.CRAB MD5: 540d368ef25e13454ce083ceed1c635a
SHA1: 4a5e42e677d72dae63a90155da7982306139a53e
SHA256: 294e0fce36f7f03b04815e8ac5a6d85e9f8d4061784efc639e49e7e32da47b15 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{4204EE1B-0338-4788-B199-D83E4955FAF1}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{4204EE1B-0338-4788-B199-D83E4955FAF1}_WindowsUpdateInfo.CRAB MD5: 1250dfbe50f8e11bb84b20ed060abefb
SHA1: 62cf31f356db6f9f017496aecd267a934357e6de
SHA256: f59643bfe08dffb2c9dd44f4349582ec2c1c6989814e2430f15c2c95a4c62958 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{425865B3-1A09-4BE3-8A97-1BAFFDA74ED0}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{425865B3-1A09-4BE3-8A97-1BAFFDA74ED0}_DriverPackageInfo.CRAB MD5: 1ca5e90426a6bb86b2e0ea46eaf6805c
SHA1: 66478a65624052ba2d15179a5fe74828f600540f
SHA256: 7c8e9652b82833cd4869acc2d66392fc2cf3d31e0d63e43fad6bd538547fd10a 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{425865B3-1A09-4BE3-8A97-1BAFFDA74ED0}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{425865B3-1A09-4BE3-8A97-1BAFFDA74ED0}_WindowsUpdateInfo.CRAB MD5: 1c6b35df9a98a71d369b0bf9ed9d4992
SHA1: 354153110d212c66456e58cbb19895cfd28cce02
SHA256: d64cb634bf935ad6578120daada2aa3d9b403c8c74afd63bd036371b554a3508 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{51296D62-5AA5-412E-9A8F-ABE77CD15E9E}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{51296D62-5AA5-412E-9A8F-ABE77CD15E9E}_DriverPackageInfo.CRAB MD5: 720a71a79cf4b48fab2d17a505a0ebca
SHA1: f3daf13d320e09a334b35f504ed3d55f76904f48
SHA256: db966c3643db55010c21fa56435d35bcd837bbd58ac25150e54b72d4a3fb5c7f 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{51296D62-5AA5-412E-9A8F-ABE77CD15E9E}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{51296D62-5AA5-412E-9A8F-ABE77CD15E9E}_WindowsUpdateInfo.CRAB MD5: 466d3115c2f76b5f3aabd40f948f91b9
SHA1: 126bd4258239fa275a99b8ebd6cbabd82c0db981
SHA256: dc7bf2ef6b0f857edca215ee2f6814b0a15c67dcd2b5229896f027005e28de3d 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{5AC56584-2304-47B9-B262-8D3164A52D9E}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{5AC56584-2304-47B9-B262-8D3164A52D9E}_DriverPackageInfo.CRAB MD5: 52dd59a8fbe97826568e69d9dd43aaa2
SHA1: a1afdf07101db620e68bc2505db5ffb10f18c3a9
SHA256: 0b98ab7ecd8e1f90d9df89775307fcd165d87afe6a07825d85847777e80ba32f 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{5AC56584-2304-47B9-B262-8D3164A52D9E}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{5AC56584-2304-47B9-B262-8D3164A52D9E}_WindowsUpdateInfo.CRAB MD5: fd2195643f5e2d61252d11dcad451635
SHA1: a5b6e0f054d190ce02d0525919022a6b15da98cc
SHA256: 65faaaa2819cdf9838fafe3f70fab0f372f8044cce1405e6eb542db38f112880 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{77AC2C2C-D323-4D07-BBBC-9F6908DE6F91}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{77AC2C2C-D323-4D07-BBBC-9F6908DE6F91}_DriverPackageInfo.CRAB MD5: df6b7b9247faa2bca752936664984839
SHA1: 3c752d279b9322c99d70133edd715acf66ea2403
SHA256: 7f4b816179576bf158dbf9b5d18974fb7ae3058cef94685b0da37bb2addf8a4b 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{77AC2C2C-D323-4D07-BBBC-9F6908DE6F91}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{77AC2C2C-D323-4D07-BBBC-9F6908DE6F91}_WindowsUpdateInfo.CRAB MD5: 67baccae601bf108e3715feaf7763755
SHA1: 2c0c3933bd63c8b66f15248a08b241e5a6b95b90
SHA256: 1ce58e60e5d503eded6cf06148f36be5cdf0ad035f63799e330e830504d496d4 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{7A521DBE-9658-44E5-843C-29DD5C50D136}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{7A521DBE-9658-44E5-843C-29DD5C50D136}_DriverPackageInfo.CRAB MD5: dd203c350d3910f1a5c00c4e07a33442
SHA1: 04838c1c91630a51757ee3b05e9b679b1befcd91
SHA256: 4e5a1150dd0732a3f78474c88e233fecf21d711ba3539f447d82c223cb47fc86 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{7A521DBE-9658-44E5-843C-29DD5C50D136}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{7A521DBE-9658-44E5-843C-29DD5C50D136}_WindowsUpdateInfo.CRAB MD5: a875ee7a645f602ab06c164a5edb3bb7
SHA1: 60b9604b8c0276cf98803d168aa304b90eebfe62
SHA256: 0266967b19782323f1cc957a5becb73a71c837befe7c84632e84c73f3c5618d8 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{8000FFCD-1DA9-461E-A8A6-B9C248869570}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{8000FFCD-1DA9-461E-A8A6-B9C248869570}_DriverPackageInfo.CRAB MD5: 9882fc1e1d1270e2b22f49ec9374283d
SHA1: f537ff73ad678dcb4f343a55844fa062f6d3a42d
SHA256: c4fd916129d6772d18065327c4ebd9b0e8c22f228a2766ebbbc0f3956694740c 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{8000FFCD-1DA9-461E-A8A6-B9C248869570}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{8000FFCD-1DA9-461E-A8A6-B9C248869570}_WindowsUpdateInfo.CRAB MD5: f531d6bd0697cbc5b01972da953280a1
SHA1: e71ca4fc81f76c198b1ef852e5204c24fdd677af
SHA256: d6dee793c84a4e1c58d049d950f057689ad856b3826e5ee2e002bcac344b2420 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{8002C55B-B05C-402E-B80D-41CEAD61F984}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{8002C55B-B05C-402E-B80D-41CEAD61F984}_DriverPackageInfo.CRAB MD5: 682c12c3e355394b1324e6cee47ec85c
SHA1: 81ba2cbfc77e4f7ac4b98832fe6c35274e52299f
SHA256: 6e5263229b5ddebb30d87e7aac7cc07bd519d73d80cae13e4816202d3025e415 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{8002C55B-B05C-402E-B80D-41CEAD61F984}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{8002C55B-B05C-402E-B80D-41CEAD61F984}_WindowsUpdateInfo.CRAB MD5: ab1a0b67aa29b31aa94d3c0b4b2fdd79
SHA1: 75ecbbbc826de0171567b26a5650f830add7c7ff
SHA256: a796b1eed72f8fb60d52864b0347ab8b7d2c793fd7f384294539ce26df380b8d 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{9069688D-BEFB-4294-B8A6-15447E1F812D}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{9069688D-BEFB-4294-B8A6-15447E1F812D}_DriverPackageInfo.CRAB MD5: 092a106b90d25f8379b23d33276f2a86
SHA1: 28e9cba1f100267b30c33181e9354b6069f582a4
SHA256: 5bd678cd31b731da6c9eaf2cae5d783d8de97c60bfa39d4eeb47cfe4b4191b64 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{9069688D-BEFB-4294-B8A6-15447E1F812D}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{9069688D-BEFB-4294-B8A6-15447E1F812D}_WindowsUpdateInfo.CRAB MD5: b45ef8489ee6598f065628bfce3698f6
SHA1: 21eaf84c1960a45e19d438055708a26edbe01d4b
SHA256: c67b8f8cee729911829afd57015197a4e4d62c43e6b597bd922c6bc9e597e3c0 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{A8F69A00-BBEC-42A5-A3EF-BF81814BD449}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{A8F69A00-BBEC-42A5-A3EF-BF81814BD449}_DriverPackageInfo.CRAB MD5: 6db47c008f840894e0cad7e9241adfc7
SHA1: 2e5c6488404ef793aabc79eecf127d0fedd93e0a
SHA256: 3d908ab1f94ee09efb092da44ec06db281370e19d5e34685276b2402c5295fe2 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{A8F69A00-BBEC-42A5-A3EF-BF81814BD449}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{A8F69A00-BBEC-42A5-A3EF-BF81814BD449}_WindowsUpdateInfo.CRAB MD5: 399a040dadb9cdc998b32757726a8d2a
SHA1: e537f2d97bf4bb5b4763312219ae35d00fe25a31
SHA256: 50d19d47a8be0852bd99d3c91d696fb3f0d30e1f8c25a12510cd52cf3108e5df 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{B46F41EE-AB11-4C6A-890B-DF55C28A4B11}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{B46F41EE-AB11-4C6A-890B-DF55C28A4B11}_DriverPackageInfo.CRAB MD5: 8040ba6cfa273638c4f03cc97fbcd103
SHA1: 376b31578f91d48c0d59078126fe7d2d79b6c6ca
SHA256: c98f2bb8785e0d70614c83def9b47bd4f3c1f8685f8aeb730d2916ba3070ba83 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{B46F41EE-AB11-4C6A-890B-DF55C28A4B11}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{B46F41EE-AB11-4C6A-890B-DF55C28A4B11}_WindowsUpdateInfo.CRAB MD5: 68fbfc3565a2a595b36099908ed1741d
SHA1: a12edd4d155f4748662131a7d09f63c1ecdbcbc8
SHA256: e04cd76089c571995233867f6d4ce80c53ec0c50ccb833eeeed6178708d84e6e 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{BBEE4ABA-5DA4-47F0-BD54-17C95DFB7E64}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{BBEE4ABA-5DA4-47F0-BD54-17C95DFB7E64}_DriverPackageInfo.CRAB MD5: ad8631245cda3d5cde5375b9369ef746
SHA1: b7ab2531794bc36bb7ff5ca2c8c0549d7601e9ca
SHA256: 7e92e5c38f481c5a4a9291196fb8e6c68bee0e37265273782077f888e4013c0e 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{BBEE4ABA-5DA4-47F0-BD54-17C95DFB7E64}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{BBEE4ABA-5DA4-47F0-BD54-17C95DFB7E64}_WindowsUpdateInfo.CRAB MD5: ff5f25c5b88da62ca61a5de87e3286d7
SHA1: 767c4ad72b6946feec3d8e0b276ba32982fab4bb
SHA256: 8267bda13d6a59b397aab310813a670bbeed6fa96dab509e5383b0bd63c0ebce 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{C3F59859-DD84-4710-B6BE-740F016AD023}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{C3F59859-DD84-4710-B6BE-740F016AD023}_DriverPackageInfo.CRAB MD5: ba71d45188f1caf42398568b9746d4bd
SHA1: 4ac98cda6b1406c5e1159af8b5eee8c5dc6c119b
SHA256: 8655a9a710c85b26d981a57cea1bb18680b33fef777a3512618ec706d990d63b 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{C3F59859-DD84-4710-B6BE-740F016AD023}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{C3F59859-DD84-4710-B6BE-740F016AD023}_WindowsUpdateInfo.CRAB MD5: fbfd425cf3eaff80f254902fd2af5d2d
SHA1: 7f3adbc202689a6c04f0f92eda9da510fdd38bf7
SHA256: f1c6765b22f3196114e3c173035ffa7dd43add3d4e11c2f760681566d2ea951f 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{C4C23D0F-5069-470F-9760-27EB797F66C2}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{C4C23D0F-5069-470F-9760-27EB797F66C2}_DriverPackageInfo.CRAB MD5: bff0f0e4e051c16d7946a931cd023451
SHA1: ebe86e831b11eff0f8b9925a9a41151c889dcd50
SHA256: d5add29d6252e3ffb2512c64379c289cac725823fad9ef010690c5246f4f6e01 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{C4C23D0F-5069-470F-9760-27EB797F66C2}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{C4C23D0F-5069-470F-9760-27EB797F66C2}_WindowsUpdateInfo.CRAB MD5: 75ae51fbd84b6435525ab7a42b17fcf8
SHA1: 66ed00f0666f62babd4f02868b5a31b1325a71c6
SHA256: cfd172d60a3a7675317d5df0ae79b398cbe0e2ac674db0b23b1744ba75cfd361 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{C861246C-5D84-4FF4-A753-BAD4631D65CA}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{C861246C-5D84-4FF4-A753-BAD4631D65CA}_DriverPackageInfo.CRAB MD5: 1c00067d6f774e3a337fd050240b17fe
SHA1: 199bfeaf471a28f5728db28e65ba1bc5f35844cf
SHA256: cf4a3c1a0e4933a303cf9a6f6523e7c8a33dc3432e2dc7c4f430ddd62985e933 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{C861246C-5D84-4FF4-A753-BAD4631D65CA}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{C861246C-5D84-4FF4-A753-BAD4631D65CA}_WindowsUpdateInfo.CRAB MD5: a809c8e30c3dcc1122bc79b9f8940896
SHA1: d275b417e99b03be1ec3a581b823fb6ac46febbc
SHA256: 035b39b0f816b0d70ddab0c6fe4d74900e1e60fbb94de9d5c25c5c9b13bd0b03 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{CB7F5435-7D84-4F72-A889-A21E062F0CB6}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{CB7F5435-7D84-4F72-A889-A21E062F0CB6}_DriverPackageInfo.CRAB MD5: 305d08c4005b0124d2887e66c15c3a3c
SHA1: 106f10df354c4f877e1fed2e7be63baee65ee024
SHA256: d94bf92b581ea1af512b6ff77411b7b364a16346f150320d85e46881e84ce69e 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{CB7F5435-7D84-4F72-A889-A21E062F0CB6}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{CB7F5435-7D84-4F72-A889-A21E062F0CB6}_WindowsUpdateInfo.CRAB MD5: b0410d534a02bd82c61f6195328caba4
SHA1: 3249c4cb685ea215d45c4a54214c1ab28c7dd737
SHA256: b99cb56bdc728eb9f92f42b5b1b12d7b99669422d439c5c7246948d6aef2c24e 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{DBAB67DA-647A-401E-A02B-58C06249C638}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{DBAB67DA-647A-401E-A02B-58C06249C638}_DriverPackageInfo.CRAB MD5: fae52d84fdd0e581c80928adf3ce6352
SHA1: a50eabd337316b2431dfdc9f61b1eaf80daa2285
SHA256: d333cbad4c7475bc8f1f142e3afdfc44e0029ff8b7b53c81e760d681ba64309a 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{DBAB67DA-647A-401E-A02B-58C06249C638}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{DBAB67DA-647A-401E-A02B-58C06249C638}_WindowsUpdateInfo.CRAB MD5: 0d824cd39e767cddf5339299f89f7f29
SHA1: a87fe3a38fa5e131392e8cec96ee056b82d67fc1
SHA256: f55400a7cc2457cc1943c6d15c3852a0f97c8b59ad126907e01a31010ba8963e 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{EE224D27-954D-4040-87C6-066B5517487C}_DriverPackageInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{EE224D27-954D-4040-87C6-066B5517487C}_DriverPackageInfo.CRAB MD5: c80366540a3ce8868e783b9732812eb2
SHA1: 84b227834e1dc0354ef5aa98b5625475d3f52f28
SHA256: a980f73c5af94dfd1d2ed6667595b1622a4be057812404ad6f4e861ff7243790 		Access, Read, Write
C:\System Volume Information\SPP\SppGroupCache\{EE224D27-954D-4040-87C6-066B5517487C}_WindowsUpdateInfo - Access
C:\System Volume Information\SPP\SppGroupCache\{EE224D27-954D-4040-87C6-066B5517487C}_WindowsUpdateInfo.CRAB MD5: 2176c9534c3658366c29ce8e7e669ef1
SHA1: ef58e1c8812d262a803df697e60af4a0cd23adba
SHA256: a4fd38df834a091d73f2c0b6b45272b546e742c48f1fbcd9e2ed2ab7c398efac 		Access, Read, Write
C:\System Volume Information\Syscache.hve - Access
C:\System Volume Information\Syscache.hve.CRAB MD5: 4eedecb1129348b7aa54be9feb25e001
SHA1: 42f53dbfe25ad3c9086da2ef085608f01447bcb9
SHA256: 02ff7a6013a126fa0292380aeb18f851f592332eca3b51d47cf177f0122cb9c3 		Access, Read, Write
C:\System Volume Information\Syscache.hve.LOG1 - Access
C:\System Volume Information\Syscache.hve.LOG1.CRAB MD5: 3138483f79f8f0b1853a6c9c1def91a1
SHA1: dc57e805679fb3ded2553bac13c165c0033249fb
SHA256: e394a2794a3d6776b6b17750796091f464db0ffa5d061a1d40ce5040f3ac35d7 		Access, Read, Write
C:\System Volume Information\tracking.log - Access
C:\System Volume Information\tracking.log.CRAB MD5: fdf8183d0df49ae11ef35a19cd314f97
SHA1: 9bad5cee673d2ab98b1521d4596d9115b0f69797
SHA256: c744d415f0d063f365b74e350bd540956ae1a22b9bdd33f67f468a1da0de0201 		Access, Read, Write
C:\System Volume Information\{066f465a-4995-11e7-93e9-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{066f465a-4995-11e7-93e9-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{12afb45a-681b-11e7-80b9-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{12afb45a-681b-11e7-80b9-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{12afb45e-681b-11e7-80b9-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{12afb45e-681b-11e7-80b9-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{5a03eaea-6daf-11e7-b9a9-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{5a03eaea-6daf-11e7-b9a9-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{5c1ec902-668e-11e7-870f-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{5c1ec902-668e-11e7-870f-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{7381dc5b-4993-11e7-87dc-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{7381dc5b-4993-11e7-87dc-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{8456a7db-6db1-11e7-9a97-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{8456a7db-6db1-11e7-9a97-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625b7da-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625b7da-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625b905-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625b905-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625bc52-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625bc52-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625bc56-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625bc56-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625bc5a-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625bc5a-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625bc5e-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625bc5e-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625bc62-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625bc62-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625bc66-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625bc66-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625bc84-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625bc84-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{9625bca0-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{9625bca0-5213-11e7-bb6d-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{97a6ae5a-521a-11e7-94d2-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{97a6ae5a-521a-11e7-94d2-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{b426f660-7189-11e7-86ab-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{b426f660-7189-11e7-86ab-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{b426f674-7189-11e7-86ab-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{b426f674-7189-11e7-86ab-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{b8daad5a-66a7-11e7-8a16-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{b8daad5a-66a7-11e7-8a16-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{b8daad68-66a7-11e7-8a16-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{b8daad68-66a7-11e7-8a16-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\System Volume Information\{b8daad8b-66a7-11e7-8a16-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752} - Access
C:\System Volume Information\{b8daad8b-66a7-11e7-8a16-c43dc7584a00}{3808876b-c176-4e48-b7ae-04046e6cc752}.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\2-Qs7Qkxl_g.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\2-Qs7Qkxl_g.mp3.CRAB MD5: 7648fda1318782245c3000a23d3a4e4d
SHA1: 5fd6c0ed10aa459795a165881b022b01558ba38e
SHA256: 7deebde919541c097676883e4d587255e356ea85d9127c67a5cd28cafa7db384 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\5BRnm_4g.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\5BRnm_4g.avi.CRAB MD5: 36b5ca358e8850b1d302ac83b7f0de6f
SHA1: 5cbe222906a8d1bd42e89f064ca6a3c5b34458c1
SHA256: 721d782e6a672bc38268e730561dde7db781bed4fd5d6a9dc5e4976e90a97f7b 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\6TTZaBRuPcKj.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\6TTZaBRuPcKj.mp3.CRAB MD5: 6adc244d57503abb563bf4b6a78106b7
SHA1: cd455aaba109eb3e97a2708ae46324e4aece4627
SHA256: d4a99205a66c225a308c0963a4b03ca3f83344ea2b828a9ba0c1455a644b6b69 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\8L7Q06ltVen.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\8L7Q06ltVen.m4a.CRAB MD5: 69613e9d0ef63b1b1ae07e6b1bc70222
SHA1: 54655345f5ba50a87a75e7eb6cbc3859b0b1511f
SHA256: 6e70d082a29eb845514ce753cc1f4c9098ee4b6f5fd502bbcc14a1a5cb5e9f38 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Collab\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Forms\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js.CRAB MD5: c8dd7e9045270143a693ada15e4ba384
SHA1: de6c345f12b1fe68f8519adec8134eebd6961c80
SHA256: 60e780e8f953db7f8b2a35d46c3ef7f3b4732d410c474eab8dbc7841fe9436bd 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\addressbook.acrodata - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\addressbook.acrodata.CRAB MD5: 7e7db7050a480dc03810ac568568b564
SHA1: d1a6949e3435b62bf98b91bbbdcd45dd97dbaa6e
SHA256: 76520457b9c80cc7f253bd65e3680cfd34748dfbd41f7ab4de84483dd8bb1994 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl.CRAB MD5: 2f5f6bdf08960e1752237ea567a3a844
SHA1: 286d00bd49f25c60d71e1f75890bb79312a2e01a
SHA256: 33459fbf6278ffe25f396b48b8d9e08769c3129ca401b1365002e6ba56d68164 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl.CRAB MD5: dd98ff3b9ca1df07014e724a88dc33c4
SHA1: cef33772573649d1004236dd69165a41f7c89dfe
SHA256: 75977431a49d5a97f013275f3654d699aceb6b65c664c6921caf328dc7d9469a 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Acrobat\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Flash Player\AssetCache\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Flash Player\AssetCache\D5NTRC6R\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Flash Player\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Headlights\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Linguistics\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\Linguistics\Dictionaries\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Adobe\LogTransport2\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\C-KXV0pBGc_mIaBaAO14.mkv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\C-KXV0pBGc_mIaBaAO14.mkv.CRAB MD5: 1ddaf1c224d150b78f4d410b853301df
SHA1: 04da0f59c2a5306d096b752250d0369310aafe33
SHA256: 77ebaa3779e12c2032fd12e628d56e23158bea921e8a813f2cfb0a17c4b6e5cc 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Ccv_ue4.xls - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Ccv_ue4.xls.CRAB MD5: 8b5efee88d745a69fb363c94ae8b0b6a
SHA1: 55145910b36e3fbb6e154233bd15b002a3238d49
SHA256: 67bf484b2f49551636f52a3f01a304698253715ceb228ae9e04eabaaa32a7f21 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\E8zgIU 7wuMP.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\E8zgIU 7wuMP.avi.CRAB MD5: b75c2c3d255b7ed1dd720e318394bca8
SHA1: 4f12b784c64f9ac87e749a294ea15ab38c248410
SHA256: 0bc0d45c1e5b0979952a2f9d7ef13a1c9332e1014e41d564c52a97a288422392 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\EfeALxA3rFH.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\EfeALxA3rFH.gif.CRAB MD5: 9fad86406cf9541259cc38cb6b9fd8d2
SHA1: 70b498dbb8cef523fcd77ff005808a39c5202d6b
SHA256: be242fd7159346489c2dfa2eaef62229a571518245fcfb5e3fca1ef3adb17843 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\FKV-4Yt.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\FKV-4Yt.avi.CRAB MD5: 310311b0e07f23bebbd9139317eee69c
SHA1: e938857ce1b787a77bbef84d4ba664b2a7cd8681
SHA256: 77e7c98cedb2cd38f0fc67db0297e7a283c4e002767547a4abecfecec6fe940e 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\h1OCPaP4n8fGc.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\h1OCPaP4n8fGc.swf.CRAB MD5: 02ba599943fc69c06fd2b70df06e5eb3
SHA1: 4995d4fdf89d06d3b06a8359ad534ec3daeac21b
SHA256: 6cbad101df2bdbb45443825d72cb62774eddbcf32960de518615d9da9d00bdd1 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\HjL6.odp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\HjL6.odp.CRAB MD5: c0087c11ec83643395b1c51c27e7e31a
SHA1: e3cd618f7edf2b0893d80db60ae8333910342ae4
SHA256: 981d9ff82c45c9b74e938d312eada6bd52b167bf734165cced944107bcc16644 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\hJwxSmBu5Av_b.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\hJwxSmBu5Av_b.flv.CRAB MD5: cb05f96aecb72709efa37d0e0b7ea9e8
SHA1: db5c5eaf4a3169457e8ccc3cc752b23d47b55a0a
SHA256: 311907423932d0de4e018a31f678d3c580289705ba4891d92519b51c141ed6bd 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\HM9gAcAXVusm8zHpOcG7.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\HM9gAcAXVusm8zHpOcG7.avi.CRAB MD5: 782716c31f1b4631b41093fe7e2b8613
SHA1: 4778907ee7af176f2e1d9853713d35c48b32c079
SHA256: 9a40ca9649ce37513e79b492bd63a98e877fefb019928200f3abd025d030780f 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\htTpvnvqonaVJdlXEbF.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\htTpvnvqonaVJdlXEbF.gif.CRAB MD5: 88442769483abecab4e5fabc28740b82
SHA1: 79a568506e35f48c392b14043f10e6170dd38d17
SHA256: b54978b7c4fa20ce4a314a56bea0d13ac1646acc23fe8814ecd2e8fb44811589 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Identities\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Identities\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\JuDReA4JDibKJ.mp4 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\JuDReA4JDibKJ.mp4.CRAB MD5: 52fbd86b8c5e9b14c5b66a736260aa5c
SHA1: 6f0c8b37582ed3b4eb05f187e8d94a77ee4e7ecc
SHA256: 543557a813bd7e82aea7a935498084babb4fa7000fba2699bbbd183f4be60de4 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\LAhY.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\LAhY.m4a.CRAB MD5: 98902ee92243b69bd467637f6877e495
SHA1: de33787e391d09c700eaeacc60ed4780b63bdb01
SHA256: 2bd07cfeda337c1d3c0610cd74f0463e3f802ddac6b04e71b4b89ae07e2123ca 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\P7Y3F7QB\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol.CRAB MD5: f6333e579f6f836c123693a68d995605
SHA1: e7bed8b03714d7823445cd03b8904b5b9dd67a23
SHA256: c46dd910b818cb31e19854d3a3f122448b48f4ae1ab18c033fc0edb61403a7de 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\AddIns\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\cjrckv.exe MD5: d0ec32ab9a895228881853c93de2f114
SHA1: a618165bd1e1b7952094d1c359b669c1440955e3
SHA256: fbcdb754dc4900291e176d0813c7ae4d676a1162afd932e92fc937c8f038f060 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Credentials\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.CRAB MD5: e99a9edab8b29813de14af6b1e27c8a4
SHA1: 117846b32f99dd3dab808efc09511735ea537101
SHA256: d2305c8158b48e6e44291c3335826cf10b454124e9659e701c8653e9b8f05995 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.CRAB MD5: dbf521dcf262c910892dcc8bffb3f718
SHA1: 1ffe032837091cbc61e1d6922a347e3a252b3a50
SHA256: a16a2aa06b25d6b97613bb07588ea396517421fa8eecb7be59f01f2b9e01d038 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3388679973-3930757225-3770151564-1000\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.CRAB MD5: 119c2713d08bfcfb9ccd760b83415d1d
SHA1: 8202232e6be763fa2c9717cd8f83a7eb20755bd5
SHA256: 400d0c5f32836eed6d4000f5c0a5452a07f9ad9c8b9c8f9c0548955bfdaa8879 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\1033\14\Built-In Building Blocks.dotx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\1033\14\Built-In Building Blocks.dotx.CRAB MD5: 571a4984c3e07a66aebc7115485223ea
SHA1: 4677ced183a7d20f88e5e4f15563e2b2a1964135
SHA256: bddc16e393a250a91ff7137a8988a0b91438256f0d14fe309c38071d9a3f84b4 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\1033\14\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\1033\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Document Building Blocks\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Excel\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Excel\XLSTART\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\IME12\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\IMJP12\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\IMJP8_1\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\IMJP9_0\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\65UX3YG0\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\AY721QDR\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\DZBKZBIC\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\index.dat - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\index.dat.CRAB MD5: 1816966a801f6ecc148b139be7a84647
SHA1: 41e1ac0edb8182b78e2606ef24f8616694b79f35
SHA256: 7f512a9b311a10358d7ee9838198d1709a4f6eb11310edad6ddfd2223dc7301a 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\VRLZOZ0E\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MMC\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\14\1033\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\14\1033\Global.MPT - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\14\1033\Global.MPT.CRAB MD5: db400a92034301e26fb298270a7b1b8c
SHA1: 212f765a52206e4191665e58e953ecd62a530465
SHA256: e589e5103cac86a67529e7062d41cc21cf00d4ac01b4ab04932bd815e606b456 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\14\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\MS Project\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Network\Connections\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Network\Connections\Pbk\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Network\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\MSO1033.acl - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\MSO1033.acl.CRAB MD5: de188f543b4a5a17577bd75078059f57
SHA1: 0ed7ca405c02aa91b27e48e7f056129c083f01a0
SHA256: 66c9d5303261003219f000fefcfa62c0c60b955c724907cbe183f84f2f35e8ed 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\Global.LNK - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\Global.LNK.CRAB MD5: 4fb30ea2ebd8d9678f76d0c3196383c1
SHA1: 7c78d6ba79249d571a82874d4163a36e888d7c45
SHA256: 5e5e70bd882249cdb36b2702f85580e7e66e5dc39d96eb8d3cac36b08ef4dd59 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\index.dat - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\index.dat.CRAB MD5: 386bf6407369b11a634dff2ffc267d81
SHA1: c60ebddce1932b9369bb5112a230375001f9ddce
SHA256: c4be5dc004d466f64b79940a03f8fef2434917efde21820a28e96cc6e9e522a2 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\Templates.LNK - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Office\Recent\Templates.LNK.CRAB MD5: 13daff2f8605c16ca1caeb7aa376a76f
SHA1: 8b763a39a01c9c6d46bec84bdf55f8786880d17f
SHA256: dbacb4fd4bcd69bfc1b9498c7f3b8aea274b4eee885e49dac69ac8fd2ae52074 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\Outlook.srs - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\Outlook.srs.CRAB MD5: 3acad2022fa4f8ba24b9b568dfdd5387
SHA1: 136b4930bb7fde04af957263322a8b0536230cad
SHA256: df629c4e924b1f01dc32cf0287602862efa7613ef03d8510ba95e3cb3df9f15a 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\Outlook.xml - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Outlook\Outlook.xml.CRAB MD5: 7b2be5882a2628c0a97c377b2923c9c1
SHA1: da912685abccf21e0db7e08058360ad91c52db71
SHA256: ce9d658336243a27b949ec282f51de76487661606ef0559dd0a01cf5da0b498f 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\PowerPoint\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Proof\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\CREDHIST - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\CREDHIST.CRAB MD5: b7fde0651d3844b9ab457cf523e8a691
SHA1: 0ca2eb523d259f512fe01357c02298453202c55c
SHA256: 44732bc5dfe28cc180bc58b8fe50e096434ec6e7bf8cbe53a88fa429aca998ad 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.CRAB MD5: 74544e3c959fdab6e58ce89b181f4d0a
SHA1: 57ffb4092f096d7aea997b62481ad0a58527acf2
SHA256: 8ea60dac8ee5d06facd4c11f7c8fe7010c6422291bd350dd178052a4d8387be5 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred.CRAB MD5: dda59e69877a0faabb5432e4c28b1c71
SHA1: a897f86845ed8d9c993255780910356b99a1653d
SHA256: 3ed8861071498fb27c42a0c7c0e1ca23078243016cee8b7ca57eced5c342ddf4 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\02540a10-7eb7-4b20-a8c7-470f8986389c - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\02540a10-7eb7-4b20-a8c7-470f8986389c.CRAB MD5: 071941c061b92aaa31b98c010e195a76
SHA1: 462a9b974ad1dc5f6fa1c771fc4f0eb4f657a381
SHA256: 42291d8872e8e9d9c8e7db053b1a3aaa7a9c06e4d8a355f46868eea76ec6d3e7 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\2be989a0-16a1-424b-9211-51aa3bb43e5d - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\2be989a0-16a1-424b-9211-51aa3bb43e5d.CRAB MD5: ba90c374404a7c68aaf5c4c483eab5ab
SHA1: 7ec17a81c3f79f1e823543d4e928bc2758c8575d
SHA256: ea355c0c82bb0581026bd4624d73682c51156019826e92296fe9ec9f5b033ea5 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\fbbe72db-afd8-443b-88dd-64b20388700d - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\fbbe72db-afd8-443b-88dd-64b20388700d.CRAB MD5: 86863d9cde693c5a232c9e1d47c0c04e
SHA1: 8267d503cc858ff53351b5f7464dc6bba69ba955
SHA256: 00ea3d66e5a4ab51a8bbf429c090128820ebd4a6c95b6fdef22d65ae27facf95 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\Preferred - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\S-1-5-21-3388679973-3930757225-3770151564-1000\Preferred.CRAB MD5: bfdfaa536500236d4200738a5cc73f0e
SHA1: 135e39a43e90cccbbbc03fe90ca00ea52c0b6b7f
SHA256: 74a7a88e04fcba0d5ddb562a2e747e49b7f08981d9d773f803ab6e1b33c067f7 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\SYNCHIST - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Protect\SYNCHIST.CRAB MD5: 92097b814ca75c05674d8e0f0aeeba68
SHA1: b60856bc5d2963653319f475c71ef84242a07d2f
SHA256: f88d77af5a4dba4a30da152b30384aefdb93bec6d61c76872755716392bf2fc0 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Publisher Building Blocks\ContentStore.xml - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Publisher Building Blocks\ContentStore.xml.CRAB MD5: 28e6f04dc5f617e3f6c6cc189c1a8c15
SHA1: 6abc23dc2839bbb1c9b9a14360aeb75ed74c07db
SHA256: 625d1ab185504d31ecdfe4e549e807e58673b869b731330de23050fa63fb94b6 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Publisher Building Blocks\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Publisher\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Speech\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Templates\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Templates\Normal.dotm - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Templates\Normal.dotm.CRAB MD5: 5bf06ec43d1aad3465f8fb536ad30543
SHA1: 24474184317a4dc61eef71606d54dede6cdb2c83
SHA256: 8aa5841fa7e2394b1828eb3b0294b152739d4844592b26245e4fc65796655b2a 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\UProof\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Word\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Word\STARTUP\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Extensions\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Crash Reports\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Crash Reports\InstallTime20131025151332 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Crash Reports\InstallTime20131025151332.CRAB MD5: 99433fa9c4a1aad892b0cefc71f5450e
SHA1: 5b118a31d845d2421c782acd1a4b0350744bd171
SHA256: 4a6b18ca9720b0560196e0453a7333e0623a03b5975797d4e92ca33d389632e4 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\profiles.ini - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\profiles.ini.CRAB MD5: 6606b4783fe7ff0aeaf490eae530e772
SHA1: dc82f9fef2c4c46a8cc1b44e2a93fd27e778ffe8
SHA256: 37c249cb625cbc539f33a45c1fe0589ab475da6f43cced55ab92ee65e5e208ff 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\addons.json - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\addons.json.CRAB MD5: fb62dfa28926fd30ad72165158acfd95
SHA1: 1ff8102ef5047af27f88d95283edaefc16bbe85f
SHA256: 69ef64128fc1d08143351f64383aad4fd6ab1201321e378168b78d0de0a2ac8c 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-05_5.json - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-05_5.json.CRAB MD5: d8aeb1a07a887f6b47092d32337416e8
SHA1: 00a7045b7566b5b1bebbf5ae0baceec7b6314e33
SHA256: f7fd45f7ade08d175056d07bbde2c31207030a46b50b463a88d22909332e373b 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-16_5.json - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\bookmarks-2017-06-16_5.json.CRAB MD5: b61d9b36c0a9b6e0948b39141ccda615
SHA1: 99827d886f446cd14a93b5bdd788e0cb299a2fb5
SHA256: b74e93d88302c3e5a05e65e35a87bccf0bf50f69178b8519f6961e671153a197 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\bookmarkbackups\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cert8.db - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cert8.db.CRAB MD5: 7712c2a14ab685d96caa1eb6db8aa3c5
SHA1: 269fd26241e22634deacdb36d69d7e33ba48bde2
SHA256: 1be3036edcabd214fd09ec822c6eac50ab9e108073ffcadcc3cbb05344ca1631 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\compatibility.ini - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\compatibility.ini.CRAB MD5: 861bdd9a76c8f13ecc1a216f8404626e
SHA1: c5310e6f643862353bded450e971354eab2c928f
SHA256: 75226ec0c4e30028ca419b5459dea3c6dd5d6da778129a8af0464d5912b9777b 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\content-prefs.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\content-prefs.sqlite.CRAB MD5: 65637edcd13e99bef2554ab9e6b7c393
SHA1: 27449039f97143133cc320b6227b7d2b346a0f1f
SHA256: ffd7efbc4b0f22e061e02790aa933dd836dccaf429126c0299b408481c541d6d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cookies.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\cookies.sqlite.CRAB MD5: b52e55ff3a3fb915dd00a12929f54e22
SHA1: 6cf3414c7f8dc112086b2708baa111ec5f6243db
SHA256: 62440e7e908956c885841ee713e3a0acaa19450f249dd8047f0be9d5556fc1db 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\downloads.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\downloads.sqlite.CRAB MD5: 06a66080d956aad9b91dedf5f26ec008
SHA1: 7c160ee3ead545de051b2d4a8af8ddb59f2bfed6
SHA256: 8bfb739ac3357f27f488ad965cdf9d318e8458986ccf4c0f123aea045ff9f427 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\extensions.ini - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\extensions.ini.CRAB MD5: 4d05aa9636773f03948869fcddc2255b
SHA1: 4f2d25afe23e7b7d4e182d778ac197ec63bc69dc
SHA256: 82855eb9f94e12e2f93c7f9022a67e43b912c0ac1b94089ad39ef3f39355efdd 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\extensions.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\extensions.sqlite.CRAB MD5: 59bf4fbb869aabdf54d48886c41b0dc9
SHA1: 951ed2bd0800e6f2661354799fdda8e0d48621a2
SHA256: 9d83eafea1068d344c1e5b10978e54652a46e8f30a50f9217481e3b959bd32b7 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht.sqlite.CRAB MD5: 3f8b1d1a21090c706902cd602c184760
SHA1: 723d30a90234d7a8717f6e3612d40d0c8bb2e0bf
SHA256: 11409711c35892dbbab18a83dd7b239c084115465196e9e6e50439e3e9c17f8a 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\818200132aebmoouht\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\indexedDB\moz-safe-about+home\idb\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\key3.db - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\key3.db.CRAB MD5: a0b3e7b7c6ef6139f22c1345cf3db69f
SHA1: 6e2083ff5bc3be606fe6b8242d7bf2d5137eac04
SHA256: 70df366d24fac19d3ac1cc600b21d9d4156b186a36286b4553ad844ef5e0c240 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\localstore.rdf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\localstore.rdf.CRAB MD5: ea2304ed8945f089fc1ab4a1786d2d2a
SHA1: 9ba35a7e85b81ee0f348da5c8701f1e57102c051
SHA256: ca480f9c56e1ed2067368399513e6d030bb30d02c032c64d01e6b879f024914f 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\marionette.log - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\marionette.log.CRAB MD5: dabfab4250c0d6cedcba1560115b7116
SHA1: f85bb63aaabbe4eb3ab4a482be2e614ee4700051
SHA256: 2adc5303de8d58f667d053680bde70d6a732191f9ea20ca0c9fe21bd28c44c3a 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\mimeTypes.rdf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\mimeTypes.rdf.CRAB MD5: c55acd8efd80f08e4e71574ed60ee708
SHA1: 4750d66b53f401e820cb9a543c8bd5511e63bc89
SHA256: 61541404be78add186adac79091252d62adb8b9d5bf52861d1fc245ec4ae177d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\minidumps\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\permissions.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\permissions.sqlite.CRAB MD5: e1039206bd646883ec90ad9e7b8f729d
SHA1: bea71e8f70f116840dea014bc6e9645d81d49c50
SHA256: ac4458e7f13f220db00a63e29f33444d64227db217dc1d1b63935edb32746459 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\places.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\places.sqlite.CRAB MD5: 8ec43043ec817f0154e727589d5535ed
SHA1: 35148c5cc59b978203012a7fd4dae6f28ebe531f
SHA256: 7482d83790814733b672593fa11af63423dfdfcdda0a1d2c9c1c3ca7c49f17ac 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\pluginreg.dat - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\pluginreg.dat.CRAB MD5: 4de74b188b633d354a479315e2be6dae
SHA1: 25d5325adff5e52748ed5549240c5591edc661aa
SHA256: 90c8fc483f2b6a814adc9dc268149736b955d2165a53fade6a1facc41b1a0457 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\prefs.js - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\prefs.js.CRAB MD5: 18345bce62591199695d28dab8c9f4d4
SHA1: dfe71c66bdd159c96f4a37a0f0de332507ef5092
SHA256: 8e234fc21e3edc39816b33db29432dbd6de5a5bf99f3087860c7fa9d1eb0c5ae 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\search.json - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\search.json.CRAB MD5: e8268002d1eaed6e7f27b1a898d35927
SHA1: 7b1f3281ea5721632a7d6506ccbbee0be1f6566b
SHA256: 852bd2bb5c35f0937b27521cfb4b97f710cf61939876a4b62950351cfffb585b 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\secmod.db - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\secmod.db.CRAB MD5: dcd362083d46cfb4aec57398908964b3
SHA1: a3f125a27680342ee6b59f48118a4bfb98f5bdbb
SHA256: 5e4d02d70438462f6e46bb8d72cd6c0a4fc5d39b63b3b5d0123618763e44f46f 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.bak - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.bak.CRAB MD5: 8fd7068f701878c4273dbb56c5af0f1e
SHA1: b1b963ff43f4fe82049847ec58242e95969c450f
SHA256: be79cf8c9553771f03fea72cd871de9b0048ee80e394e882925406dfcf67b13b 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.js - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\sessionstore.js.CRAB MD5: f0cb38e0f33bde285e847f1daaceeba0
SHA1: 2fd434db765de3cd571644f5ec216a33cc26d266
SHA256: 86c0ab06b8470f742396b1ac71ac10aa53b7d8ba67e19705a0e707da6735c2e1 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\signons.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\signons.sqlite.CRAB MD5: b9d320a0581118ad86efcfd7899b86a2
SHA1: 1eb6f36e1d378bae01d862d01a309b9371912555
SHA256: f8dda87aa5a52828b2a0c6ee13fbe5fa9a8f436b08927ac708c1f5cef9cd2f9e 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\times.json - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\times.json.CRAB MD5: 4afadc75e99869bf1a99404032cfcc27
SHA1: 402a0bec87f52f841ce5a49b483f5acdafa9b245
SHA256: 06b0632c5be0eb35cc8671ff8dd5b1cb355b56fe086c93f52be4133226af05b9 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\webapps\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\webappsstore.sqlite - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Mozilla\Firefox\Profiles\silmbjec.default\webappsstore.sqlite.CRAB MD5: 492af8cf1b95f62f23e545da9805c3b2
SHA1: 9ffe6c779f9e85775a51141efb26c912672c19fd
SHA256: f0c6163c32855b20a9a90f492aba6542079e01fdf8f067a3780b753c5e3e4e29 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\mpwE.ots - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\mpwE.ots.CRAB MD5: 7d83996a033607396d1cecd6051871e8
SHA1: 16c87befde4af84d9dde256429f312ae1d2c97e0
SHA256: 6190188e3053a1f8347370494be7fd2007e8cb5452c16c30bb81d519efd895e3 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\n0j-h4AXm1a_.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\n0j-h4AXm1a_.mp3.CRAB MD5: 58cbae4253a1a2d3b7f2a96ca3f523eb
SHA1: d2d32a3f18fcb8bcf1a4f5a247a31d79a5a5796d
SHA256: bdf12fafe256114700107c2d0534e56213ca780cb0f136f0d5b3af015c9b3e8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\nJhQK.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\nJhQK.mp3.CRAB MD5: 15925403f169a2db0928b4abaed46827
SHA1: 94557c29264b38565e6636c8a7512e70a6ceaee0
SHA256: 5b719ffeb81c92394aa6ba0034d84c7ec623d3644fa366a19d6861db9b861b51 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\nO6oeI56S1gzLYz.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\nO6oeI56S1gzLYz.bmp.CRAB MD5: d2f8559fbabb7966e3a26a07c4c840f3
SHA1: dd28e1d223781f29f1641915cba3143557db7a71
SHA256: 72742350db52488a65728fe773fd615dd307b9d1e13f23f80841651558cf4efc 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\OdWlklZ4.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\OdWlklZ4.wav.CRAB MD5: 8f8dfe2dd24ba9e5a0de285cf018f0f1
SHA1: feb4ae7c1da76f6cee32c62a162d2ef1336828fe
SHA256: eb29f564523b51cbb29c831a12e5bab3f7abd340b59bb2e4bf041668934b1501 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\ovsYo7PQdjezJ.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\ovsYo7PQdjezJ.jpg.CRAB MD5: 2bc609737fe424d45dfca7c92896e1d2
SHA1: 1e14409fcfb2499df72ef96bbd85fc10a6ddb158
SHA256: 1513413aa2fbdaa5d0e3977d0a106fc4c1835545a115982ca7e31700e30055f9 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\pkBvBzek-3 dc.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\pkBvBzek-3 dc.m4a.CRAB MD5: 14ec30daf5d70923008a53592460c7a1
SHA1: 2588dd21ce188ddbd8b3bdf65fcf4c0442df9b61
SHA256: c72f432c275515a210723e3f49d25c1f6af19ec22f190aafc60510bdd18d391a 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\tyXijnScJURE.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\tyXijnScJURE.jpg.CRAB MD5: cfdf074dcc6be1b39fdb55ebc179bc7c
SHA1: 9451714a2f4c9a10d622e5597f7c963bcc20c6e1
SHA256: 5c9e4cc49b3b93becd098bfd714dee8c2a5ccffab48f878f13b3bfdc6f70edfc 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\u-1XHGu-qj0 3Jya.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\u-1XHGu-qj0 3Jya.m4a.CRAB MD5: 709bd269ef5755170908875a3ad947bb
SHA1: 51417b096985cb68ae6dac04a7506e181756ca66
SHA256: 6b6b00599b13e6b2881914db1802763b9e291306263ad9c48a23e98df6f75e45 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\zFdT.mp4 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\zFdT.mp4.CRAB MD5: 07ccc47c4945f83f3d8078f08af5b43e
SHA1: 032db88a5248eb1885d3181391ba17a316ad5847
SHA256: f86063c23ee155cf2263909beccad93491c851e2652f78c4b69f432047be6099 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\zS0mLjMwh2piP6.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\zS0mLjMwh2piP6.swf.CRAB MD5: 872bfa68ba37cb87d8f8ef7aca313b27
SHA1: 183eef3baa951144e9406eb8352870a5b003d1a9
SHA256: ecf1040976f88505fe1b4acd3bef634c4609e40928c6d2ca8ff6d04664e84e57 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Application Data\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Aclviho ASldjfl.contact - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Aclviho ASldjfl.contact.CRAB MD5: 0cb4fe7c992b4b9c401ca3ea5d890615
SHA1: 6cb11d20c82f41d5c2421c77e6892834253223ef
SHA256: ea58ecdbd747284b20e1351ef45c4a4b74afb21d3e8631ac11a95e4861c5fabe 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Administrator.contact - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Administrator.contact.CRAB MD5: ad237402b590d3583636d360d207246c
SHA1: 5d056c3c8530663486d2b10b0c25e2a350cbbc61
SHA256: f6f530765525eda080a6e3228f3ef59b509f585f64df7123e244696be156f673 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\asdlfk poopvy.contact - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\asdlfk poopvy.contact.CRAB MD5: 21254075c1954d19ffb5f3683a70e936
SHA1: a2047f9bd9af72e17a6f018350132a3f97bb1be6
SHA256: 33fb6ce21abc1322add42d57f11939f4b57bbc5fd4c651b3c28f33fd072b09b3 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\chucu jadnvk.contact - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\chucu jadnvk.contact.CRAB MD5: 51c6ff51c9f54723109b27cc29bda2bf
SHA1: 71e451384cd531e5bb6386b6be11ee3020864b79
SHA256: 349a1a4bbb6ebe667345139e28bb0f1db20f18e5cdc1ac79b53dbefa83ef46af 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\lulcit amkdfe.contact - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\lulcit amkdfe.contact.CRAB MD5: b890266c6a013061b1889ff82c5a6e25
SHA1: 5b2cbdf828a23c877905a25bd20cfbc06c66617c
SHA256: 3cebed8d9c882aafcf2e68ee6c6189fc4a81696688fd81779189f9c00ce74a9c 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\sikvnb huvuib.contact - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\sikvnb huvuib.contact.CRAB MD5: 0ba26de87cfb5b3e0fda8b1e3d8d2d63
SHA1: 2da939eefef65e14643b1723e702516d739f3bf3
SHA256: 51426f52cdf26bfe857df9d1d04b3130c0150e2989f638365b7fc03a9c4ae356 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Cookies\\CRAB-DECRYPT.txt - Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\10robSV5r-dxmczvR.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\10robSV5r-dxmczvR.mp3.CRAB MD5: b6be6629523d67774627b98b1fbbfefc
SHA1: 2f4c92d0d4e8c97854d6c0923cfc32d92c2a1fe7
SHA256: 0c645e787ed1638a99bacd020b1ce04fe62a90c4e6ba294e04bcb8b8dad5dd46 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2V-lPRVtp1.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2V-lPRVtp1.wav.CRAB MD5: 74b2843d54c8d3231166354222f9c3fd
SHA1: 0f97f0874812bec72d3496b30e228d3cb116720d
SHA256: f9eb933027b7f8c56ecc7d128a98094e222c843f553a729e3c8b05feaff008a2 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3fcDLH6fv9OVG5vM.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3fcDLH6fv9OVG5vM.swf.CRAB MD5: f3aff3c67f54ea049cfb4c0faa879b74
SHA1: 6c40b25b96b8bc13852874454be05ce285818164
SHA256: ddbafabe2f58860182ee1b872f381be072dd5d7d805c4b71ab6e240ea947e0e2 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3rtHlrdC2K0.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\3rtHlrdC2K0.swf.CRAB MD5: dace0fd3563ea35b3d38ff1bbefc20d4
SHA1: e7ac63b094fe01f6bab239afd7659eccc1e55c79
SHA256: 4e627dbd40859c58ca6fb315ea58494713b8f515dac61c4f25d0b97d0b17ff96 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\4EVdMq0pGGZ3R8xaDm.mp4 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\4EVdMq0pGGZ3R8xaDm.mp4.CRAB MD5: e374ecd1ac31d5b53c8316fd5716b0f5
SHA1: f41b3bc1f408a0e2135c9a6bcedcd56c0f558077
SHA256: a7803fe6338896203136b80f74a3d32266bc0e3a31bb85cee3ab4c4311e3a526 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\8dtew.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\8dtew.wav.CRAB MD5: 9020b626d839d05027c6f0ab9b1f7b9c
SHA1: 65f553026c4a08a7136b45972344e2d15b97f289
SHA256: 7c964ce84ed39efba6dbef4f9f2102e22cee767b97c3efc934e9db980b36a9fa 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\bpqeH.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\bpqeH.m4a.CRAB MD5: 20b73002836a6044a512ce43315d495c
SHA1: 8b679c98ddee23f55ae974d0b43515ec5248640d
SHA256: f0d4112153a7de9756cc78e86fe205631f0234452831e85dcf6e2a0fc37ae238 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\BtLmNeLb6h3yYqxDquAL.mp4 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\BtLmNeLb6h3yYqxDquAL.mp4.CRAB MD5: 5782dc232a056c0bf29d6832af5e4163
SHA1: 48107d5caad68b7ee9deb6858c3a5dfbf980364a
SHA256: 81df32c108f9b0a17a7d8d2d739871e821f6fed71f89020414cfc2fd1c33a8a2 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cSotfjiMh a2.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cSotfjiMh a2.swf.CRAB MD5: 026248b616c081283a4bf3889518982a
SHA1: 05e95595541ddfbed489db1fa2d50c7e3700070f
SHA256: 1a19acfee47cc96b487b046c3c2c50e452295cfde7ba7feb726e8ebf2fd9dfd8 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CwNfGb.mp4 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CwNfGb.mp4.CRAB MD5: fe919362801ab9ba98d8707ae1a18c06
SHA1: dddbc4e7c1178025297ed732b23db60c1bbab650
SHA256: a22249ab1c688dc6f955c6afd26a2e4acae355ababa5322778c3cd379f07ad3e 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\eXcFcSS22h5ICIEztQ36.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\eXcFcSS22h5ICIEztQ36.avi.CRAB MD5: a25c137303afe3dc5ae9899432fb59e0
SHA1: bc8716a70261f8bbd34dde038f41bde7ded57552
SHA256: 047696fdd4b41663603107b993c4b2a3addd16b26767b97f7aba745da0978aa2 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\gBHj8yig4WryyEMy.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\gBHj8yig4WryyEMy.avi.CRAB MD5: 11881ef3e3232d5caa3a1be65915dd59
SHA1: 12bf61fabc4d687732998a58435c91e2b6c7f41a
SHA256: d27c866272d2b3f0f442e087412a72428e4beb23007ce6eee470106c613fac58 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\gBrghT1CcuJGy.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\gBrghT1CcuJGy.swf.CRAB MD5: 1f0096d2fa12e1099a184a6811a26cda
SHA1: c1aede9213cea322276f1907ac58bbfe5003ab61
SHA256: 6535e178ac727afbf1129dee590c05d2cd6554d71f908b8d261f99c9ce85d594 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\hFvdUPoqG6.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\hFvdUPoqG6.bmp.CRAB MD5: a5302f53297b4d5b4e20b630760bc682
SHA1: a2001affa2138d8ac6e9b8398ce2e30d9bdf1749
SHA256: 6cc290fb4205447a8ee7e552380034542fb5535b5b5ad5cda84d149227be66eb 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\HkIKM9bCJRlLh8WKM.docx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\HkIKM9bCJRlLh8WKM.docx.CRAB MD5: 0fe248014f8ea49c2ed4c07c7d1637a0
SHA1: ac3bf7275eba6385a51c1c1ab263e24c9a8ddac7
SHA256: bc7c04b104908be2a230b20d937547ad466f6ade076531fadc1a407a8060afe8 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\HY4vAkOCEqCuWqODF0F-.mkv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\HY4vAkOCEqCuWqODF0F-.mkv.CRAB MD5: 4e0e46d30fd1d58a3d04f50ec82fc576
SHA1: 8496279b647e90139f9104c2e95abc255e5df059
SHA256: 70273888cfb2b6de6aaae59f41831d313833f322a2aa0f4db76fd92fbbcae309 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\j-_vbYHXQCaG.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\j-_vbYHXQCaG.gif.CRAB MD5: 38225ccc6ad4691832e508b2e90c7864
SHA1: ac6a03871ff7b592af86416622c76bd8b62b8d2f
SHA256: fab3cea086589f589503dba3df044bd335dcc967612c915d32cfb86d9facfac0 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\jE-s6fqVE k1Ih 9.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\jE-s6fqVE k1Ih 9.swf.CRAB MD5: cad63b973e621016fc91bfc2f60a56a0
SHA1: dd259963ab68410a5876aaed6cedc139c150a602
SHA256: 542be7a78b82202f0f63a66b7c5721ebb98aeca7e086917f1ef8ad6638fca445 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\k64qW9_noz4XafX.xls - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\k64qW9_noz4XafX.xls.CRAB MD5: ade4c447fc46dc1ed70bf25d14587323
SHA1: 79304d6325615ce6f6bb9a11ad8adc4e0f355dc1
SHA256: 06a3912e348c9ecefd19c715d1fd2d83a35c7938c340b7b8bbe11fb832713fc6 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\mVU8Qqmt0H.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\mVU8Qqmt0H.bmp.CRAB MD5: 95d04bb0ff7dd74c609563e38ec48a0e
SHA1: ab94daef2dbad92e91415dd287692e935ddac2cc
SHA256: ab6299611fade2bc417ef303a461073fac424624d0854c3a4cd7e0a3c6f19929 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Nhjyefk5YV K1 PZ.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Nhjyefk5YV K1 PZ.mp3.CRAB MD5: 19bada29ecacd59a01bd88348a7aa091
SHA1: e746c9eee160b44b92e984247779c676c436595a
SHA256: 67879e5180c35c79e86cc898cb3e2d079e659c0aec5866e8c8d259e9f0c95bf1 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\O0yjLD4MxbtwF.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\O0yjLD4MxbtwF.avi.CRAB MD5: 6fb6d5536bc7839727f41ea2e51e2a49
SHA1: 625cb334ab2b03bae51ad9be3ceb9486bc99f6e1
SHA256: 56c3aa5a010447f59fa25500da755046a384a7ade0731bd97cca99787017c5ed 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\O5xIcnqyl_RU.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\O5xIcnqyl_RU.gif.CRAB MD5: d198649ab2a505fd09a244356cf53354
SHA1: ae6da9b7b96d007158c90d0f7a759c4c864c5357
SHA256: a81fa7fe7c9f592e62d138675a3c4adb1d21baeac377d4b13de3819e572f7a35 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\O_GtS4sAYGJ44bbL3B.ppt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\O_GtS4sAYGJ44bbL3B.ppt.CRAB MD5: e17b4c9e185d3cd3a7e5fb67c81f5f6e
SHA1: 17017d1368e09a13e045524279f7928411f07cad
SHA256: bced775fa025ed1bb23502464aed9524eaf06c1e415276c807cf3585739b6c00 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\SnA1cp_X5vRh0koe2o.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\SnA1cp_X5vRh0koe2o.wav.CRAB MD5: d7ccff5ad029e322d4c0e44e628eaf5a
SHA1: 7ba5a72a8439c0836e59b4668872585c67750726
SHA256: f1b5bba680a5f0b19b8ead2b4474ae12aa21bca8874ebba0dd4ccbf86c610e46 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\sUYP LE7zWo.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\sUYP LE7zWo.png.CRAB MD5: 74a8b44ff3f9fccddc366ba5ed45d607
SHA1: c045040e2936394b601656b482e9a623ed0194a5
SHA256: 8caea7b8053320ba022fbf552fcbdf1a5350ec87ae288516a401b91c63f412f9 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\-evkcHBwAa AH5Px9a.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\-evkcHBwAa AH5Px9a.avi.CRAB MD5: 18cd6da36b9978f490e5836d9d234eae
SHA1: c88ea0518f96bd9d769d6a2ae713a55878a9c666
SHA256: 225b5fa75645a9b7f8b83a452e931eda22891132183440222499d670fedef5bf 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\1bGYXVbPc_4cgvbfg.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\1bGYXVbPc_4cgvbfg.png.CRAB MD5: bafd4bb7a159a6f19f5fcedbe4431e20
SHA1: 23ae9eb7c092bbe41c09ad8504821751ab332211
SHA256: 1160a02eee52f4f2679eb76a5251cf733d8e9cf5fe53868236bc6c6c508eaf6a 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\32m30.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\32m30.bmp.CRAB MD5: 7e1164757e53647db598704ae691b300
SHA1: c5fa52f14f6f9162d8fb016048551df5733b6af7
SHA256: e8482c48191d8d9be0aef1f1f12cd877b67e9941c212072ca84abf463c533453 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\0WAVLT8vPGR2Jbgu.ppt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\0WAVLT8vPGR2Jbgu.ppt.CRAB MD5: a16f38b38081b3d4be489e26cefd0bcf
SHA1: da0716a47141b959dd391065ad49ed3743897d95
SHA256: 3e22e00a0a8f1439da48ea9ec4605c347906d43ad25ad35c014cae8df0af8e7f 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\01usBj7R2oeb.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\01usBj7R2oeb.wav.CRAB MD5: db111b16bd1bf78d9426a27249e4b493
SHA1: bf9198a5d7a47459be5e46da9114f704277e1f7c
SHA256: b927e4ced407514cae95b4f076d47cb8e2c87f7a654f6678dc87f8b6b65b14bb 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\2fDM3ON9H kSbc0L.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\2fDM3ON9H kSbc0L.mp3.CRAB MD5: c19c7cc90f198eaa869a5e11ece64b88
SHA1: 8bbd1b0e3d36380c086d73bab2db3013bf89c0e0
SHA256: c53335dccf58be1c3370fbef4e5fac1cbc9c7dc94c6d118fdb319fd4c4e11d7b 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\bzmY Gp0iTy92FSqhbq.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\bzmY Gp0iTy92FSqhbq.mp3.CRAB MD5: 7f3bcf10738d215e7fc003ca8be0981c
SHA1: ce5f7a1ada133631c3e821f29310467b10dfd145
SHA256: 87cf704e9843d5bb761210bb2b000045642af5dfe56102ee8694409708096167 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\dmEk.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\dmEk.mp3.CRAB MD5: e512a1ffbcc6774895a662e9bda7baa7
SHA1: 0971df1609ae4c1d50e3524775b8df42bba7d88b
SHA256: 1b8f0b0b7374750972e3032bc09a2315ddc7e3f794f527b71e2a720b6f8d94e5 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\j7FAOUE roAbTZjqDfd.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\j7FAOUE roAbTZjqDfd.swf.CRAB MD5: 26c99e3aa2ca4f46edcaf86182449fb0
SHA1: ce0cc3fafadb0b9cb4835f6fe55a21020ad335db
SHA256: 17cb29041f4a9545d9fc1e3ebdeea395210d04fae9042ba80e2eb417a85cc9a5 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\m4y2c7g2Tk.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\m4y2c7g2Tk.jpg.CRAB MD5: 2aaeba296464c00a8bea1af8b279c2d6
SHA1: c0bb5324de017eb55e7716777a240984084c8120
SHA256: b679c3769ef553d1b573ff4a6775598a5400f9e47f666369703d9c6d3652c639 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\mHAXW.rtf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\mHAXW.rtf.CRAB MD5: 93d3b812c964d6e730adec663a2baff6
SHA1: 7e8872c0502802d4f5e9c95ead6a3f268c0babf6
SHA256: 75c13a257803770fd6a4ff930027417edc0cffcc13605711aae631695c1fceef 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\pspUia.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\pspUia.avi.CRAB MD5: fde4d9403732565fcc6e4c2074c01ace
SHA1: 7071056cc02946001ab0241107398fc8b773e213
SHA256: ced541b6a7d05a82604efbbf7fa8046340e5ff7ad6a6beb62f83ff1918019dd7 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\Py36C35Uyq5zX0u1gB\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\Py36C35Uyq5zX0u1gB\SxWoHPpo3.doc - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\Py36C35Uyq5zX0u1gB\SxWoHPpo3.doc.CRAB MD5: 5cc47c7efc387efb27bf2ecb6275c082
SHA1: bf211294af0a07012be6afa3f5b6f5aea71d3995
SHA256: 401a6a062417e952aaa91dd7638f7f85c383e961b7294c0842ee022ab0df174e 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\Py36C35Uyq5zX0u1gB\wm6K-aJlW U.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\9o5PuM0SkR0vpQawoIf\Py36C35Uyq5zX0u1gB\wm6K-aJlW U.m4a.CRAB MD5: ef7417aa757f947afa9d93ae5b3b5ada
SHA1: 7dd2fe0ba97006a2637e8643bc275391139c85fe
SHA256: 687730d7cdf6b8698644e6a2ae7df9358add784cc053623e8a919b9c118eedbe 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\m3GPL.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\m3GPL.flv.CRAB MD5: b2e405983605a438a0fb0324b0b84819
SHA1: 1dc7f998fa080289fac7155845d89f0c8078da67
SHA256: 2790602de0d5d8adaba548626cf0152b35976351ab94db9e57b37303872c0f03 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\T7HdTApyyd0hQpG.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\T7HdTApyyd0hQpG.bmp.CRAB MD5: 9880d03f0e09d93218cf1f706e3d2826
SHA1: 53b9f4deb606dbfbd779f5eeece3702ed013a252
SHA256: b70796e4e590cf846ed64ea9446da29788c39bf7c24144638450bf925ddd0ab4 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\yl6kBnr3.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\sZfZFgTQ8neCaC\yl6kBnr3.jpg.CRAB MD5: 1c8c6e45301279b5edd5dafd4287eab8
SHA1: 3f773f3b3c38307a9b41c7d7093f778c151855ce
SHA256: 3dc9d4c35b55cd2801fbf14897142c0bf47038d4d02b12dc478acbd88efc2845 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\VCn7fM0CBriHld5hTd.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\VCn7fM0CBriHld5hTd.mp3.CRAB MD5: a65318f5f7b6a902fdd5b20b762324bf
SHA1: 7733190007291e310c6cc694abda3e2e0df407b0
SHA256: 432e3634e0019e363600dec650f5819e9f40f47b83c073b4c5dde712c56db73f 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\YcQN-kJr58.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\YcQN-kJr58.png.CRAB MD5: ef2cb7d116c3a741cfd3511e1dafca60
SHA1: 57cde78f8341c1f350cb1776338d82817cc304e4
SHA256: 0a30ce4a9430b62756caac26049ae87f72f2dad4d7b7a76d885cf81dfe7e4297 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\z85Gdm.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\UyrS 3LRPz\z85Gdm.avi.CRAB MD5: 3e837f6710a2195d323be09faf4b0272
SHA1: 7a845da8fed2e54294042f454b5ed23609c22dd8
SHA256: e2507713d269319c76f75161b80740a9419a5534b1ed39e14c6e8fcc48fb42e4 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\V6c7.pps - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\V6c7.pps.CRAB MD5: 69f1732d2beca729df9f08b6ab8e2ef7
SHA1: aeff7eea181b69cdf8e955622ee55a5e480a45d4
SHA256: 437abbb534bf94eda3412d24e679e791d25578329ddde9ebf3431e21b0b4beb5 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yCxWJ_xCsqcty.mkv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yCxWJ_xCsqcty.mkv.CRAB MD5: f44d0d0cceb6261f22a192d3282d9ef1
SHA1: 4556a52c96bb5d7e6b77dd1a2303d873f8660444
SHA256: de4c6dfd8cacf6797b2d33e5a00e531eb0292d8d866f07b68418ccc3fdd4e735 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\YpQFu8fN86pQTfh.xls - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\YpQFu8fN86pQTfh.xls.CRAB MD5: 12af27790f63d5c9f0636a300ff6d4b3
SHA1: bd1de8943b235d6ff4035b28596d6cad88a94054
SHA256: a44104299f3d917ada1a50ee04d8c8f6343ce8d0757dc4bdd36b038ccfe3eec9 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0gkV1DhQ--sFC.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0gkV1DhQ--sFC.pptx.CRAB MD5: b811835e328a349cccbf6511aa136abb
SHA1: 9f02ff9d28e620db6f1aeb6ed63ec0b5047dd47c
SHA256: c50245d2cc9bf518772330a1d83de653f2c18f0d64e38a41ac491295d4edae95 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\2GRKYglwmFbx8bXs.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\2GRKYglwmFbx8bXs.pptx.CRAB MD5: aea31d3df33edb8a56a20aec83b07444
SHA1: 70ed4b7decec406a8d019c23d57081d8f8e187f9
SHA256: 98cbdd11a95d7574eb0e39ce42003b095bb0d30a2ac0b84226e73c2c25a551e8 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\_NppGaSy8U1jujb1x.pps - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\_NppGaSy8U1jujb1x.pps.CRAB MD5: 4669937e22ebb74ae3a008197bdfde5f
SHA1: 8201dd2284a881b08715ea70eef74220eb3aa1cf
SHA256: 70156bb5c3de43aa0093c6bc9025d2f8999706728f5693cdc69ecc1793bf3b30 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\cSimiQNT4H4M5EgeYN.pps - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\cSimiQNT4H4M5EgeYN.pps.CRAB MD5: a48090ece91b5f8b21357e11c282c3b9
SHA1: 725e176f82adb922d030319630f127cf9346cd27
SHA256: 03940ddd0f72f08c5c794969604d4de52e69c89db48f98efffa964671e0ada30 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\dl53 RufEnCelqjPHA1.xls - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\dl53 RufEnCelqjPHA1.xls.CRAB MD5: 2897841233d45b7de690ff0391d644f3
SHA1: 82f03a17853084295039696305e36a13691cd812
SHA256: 9d5eb3e0ce1611d05ed48e863f71eb8b66f35b78f33fff75599ae848774add22 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\guwI54.pps - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\guwI54.pps.CRAB MD5: 05f15a288b961e14d8e44708a5e94dfc
SHA1: ce228045d38e691a3e0a50b3a502ec50fc6273e2
SHA256: 0732edc06487e6901eb62d6367418540398d7308fefda411253a7c73cad785f8 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\HVrU3w6X.ots - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\HVrU3w6X.ots.CRAB MD5: e4fab7bb2588febd008fb3b1641d8d3b
SHA1: a2c34ea1ce98d6a19dbd37a29df4d32f7301c82e
SHA256: 90bc0abb229037faa7b6a2198d6f316d55fd466ecfa65e2896b5092d272abfe6 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\IZQShUbPDmHYEy2.docx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\IZQShUbPDmHYEy2.docx.CRAB MD5: 2c64393ab97ed7e974e321d45e5e2309
SHA1: fadbf8d1c680f7309ba0fbce0991c5e0678b16d7
SHA256: 70c767bc4744770465a37b196951f88fb2138fb4ba2123868871e0f0c341ed8d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\KTdfYwbZd0Oru.csv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\KTdfYwbZd0Oru.csv.CRAB MD5: 744946a67be2581e5761cc090e6adc62
SHA1: 5cbe50930218bd9fe6f91f15adeccd8291e58ed3
SHA256: 02471cab7fb803067c3a453fc083f643029fdfa51a86233bb46d389043c664bb 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\lHDdH1jrAjhxS.xlsx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\lHDdH1jrAjhxS.xlsx.CRAB MD5: 393687c22bb8471cbd6396f3000ebbcf
SHA1: 2018b2561bd5e126b5be9b81dc5caf11a00602da
SHA256: 3691e6cf37129fe0f4df2122d94ec2932c6c25896cf95ea3ef14bf3880177041 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\S9iD_ 50W.rtf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\S9iD_ 50W.rtf.CRAB MD5: 0409f9aa776d78d60834cc52b30e2420
SHA1: 1d7837f438533f4188eb97e55bf5230c8991fb0d
SHA256: 2dd13f1375952b5d402b18413928bdd6028798f9730c69579fe6ffc876f10a52 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\Tt-1G8NVj5xnS.pdf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\Tt-1G8NVj5xnS.pdf.CRAB MD5: 9422e94e4a284b27563ae40f9b0717e6
SHA1: 8cccddf521a7f71e0978a9268594cf0b1fdd51b6
SHA256: 4daed66af4c3b8ee5330286c47cfa2ed0d9b745686663dad38f092e127a23177 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\Uj08nVK0w_jYnZb8.odp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\Uj08nVK0w_jYnZb8.odp.CRAB MD5: fbecdd956edd46126c0540a28ee38631
SHA1: a37974c91b4247667702f1c5bddada2c9538246b
SHA256: b2611698dbdaed69bf4963534018e82d9bfea2a39cf5948ba245258b146e80fd 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\weWiUH vdFY.xls - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\weWiUH vdFY.xls.CRAB MD5: 5ab7ba399991e9d0009872e4bbaf752d
SHA1: ed3eb88080c76719aad706215676077691bfc34c
SHA256: 0743627e079ebc399791848f53a305782a3bbc97ef710121e6c1c7504f0cc423 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\Y4OdfF7.xlsx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5A6DQ A\Y4OdfF7.xlsx.CRAB MD5: 4f5930282d19d7c32c0d9d28e6c3c6f8
SHA1: 5fa3ed3de888b41e9826e015a426e16b40cc4a81
SHA256: fdd463e39818de399f9ec395a457c19483a9cdd4950e747802bf80d8313dde3a 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5yRZP-_t-8vc13A.docx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\5yRZP-_t-8vc13A.docx.CRAB MD5: 76ece31140dbd5c2f8f246e1a9058556
SHA1: 1c700923968abde871ac5a6622e5c531f8fc0675
SHA256: 63b98b6c2d42daa4cd84362e56a0d38db26a1667d0d68407250b569c89018f75 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\64a-qQwrBCEz.rtf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\64a-qQwrBCEz.rtf.CRAB MD5: 2d6131880ed7e2e0a0b7da5c1c3bc945
SHA1: 4a87ebffcf86d33372de1c5d112f06d9ba9d3bd1
SHA256: 1f29df740bc66e269a03f9eadf23cde5d680e86cce7390d7c7860a32cb7fe25b 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\6h2yB.pps - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\6h2yB.pps.CRAB MD5: 4262b5762258cebf22207f82df3d4995
SHA1: ab5c25d0b89cbfe40885d6220174d2b933acbb5a
SHA256: 2509d08c3fc7abfe3fd48dda9d5705b6da1dbdbd012e1aaa0f62a63eec9adf82 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7fQ EekUT2BgGq.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7fQ EekUT2BgGq.pptx.CRAB MD5: 2fff348db71aea2710655642ea2a12b6
SHA1: be2e39a8196ecef36a1127cc052094f6f8512c6c
SHA256: b930ef82616d6a46807ea023e4a1407ee66887406d20179f35a0bca1c3b35641 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_gwqVKNo.pdf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_gwqVKNo.pdf.CRAB MD5: e813acdc8b592c9234c2fbda49b9d98b
SHA1: 4e3dd264481a6a68c9148456f8a928945c8ef79a
SHA256: a4300eb3a62c5d0d222066d5e52d31fa7d7cb92f08617926d628d58c094b8288 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\bFEm.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\bFEm.pptx.CRAB MD5: 570152768d383674edcb98a2a11f3ba0
SHA1: e26549530c3c800a6bd4f57df4a6b1f405f6e985
SHA256: b4c129b5346529a3dfbbd258bdee03389715d9824dccb0809165315a889f6005 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\DDjgm6r nLh_d8bR.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\DDjgm6r nLh_d8bR.pptx.CRAB MD5: 2966700a85de55bd53206afcac17f2ae
SHA1: a61294faa98964327645b9d5170e1d9d7ba9206e
SHA256: 5a46e87d9b3a783d9c9a07969bd8f92ae085b3bd7160d1f91b60b6bfe431eef5 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\E5x1gE th5bpcJtU7Z.ots - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\E5x1gE th5bpcJtU7Z.ots.CRAB MD5: 0f72cfa859e467824cb90b5e4e4819af
SHA1: 02dce9b053055ee6c10f962f9f331b606ae29f8a
SHA256: f8f0ada68e61202334e8f2e6b7d63ce61d99b3910f3fb590af80c3abeb97d939 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\eGjh7F0.docx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\eGjh7F0.docx.CRAB MD5: 1d45e32c90b50301887e0e4d4df35e3d
SHA1: b094d13392f181935f9708807409addad2118cdc
SHA256: 819a445aaa730e0b392e94c595da19769473401de72b784a7f90a931cfd69383 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\H2iMtdKweqXiRa.xlsx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\H2iMtdKweqXiRa.xlsx.CRAB MD5: c8981708190ab0065b711d0cc4d484ad
SHA1: 0d7ab674d6bd1f48d415d6d058dc32425fc5ab98
SHA256: 7e4e620a5abb287d33796c646161f1375c0084d93b76d32a82004dad8471233d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\HFYwByQCGQ3JJXUiR.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\HFYwByQCGQ3JJXUiR.pptx.CRAB MD5: ed5c921c72303202356b7e1deac4e224
SHA1: 5536923dde0545aff9543207e7b4cfc7f4ce81ec
SHA256: 0ff2940b62e18d50b52808a8d09ef73e97f86927847a32a83bbb123bdc377155 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\hSB-lx7qEBQOmaORr.xlsx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\hSB-lx7qEBQOmaORr.xlsx.CRAB MD5: 59e89094266ab41ceba3b7d461c5683c
SHA1: 702d89a747216767ee29f785d2baa8de82510607
SHA256: 8a59af3f45f11336a8b0b19ad55e22e4083cd9fd1211d24d1fca212a7487ec5d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\HZL97EcGfD.ppt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\HZL97EcGfD.ppt.CRAB MD5: b0ce4d4e5d78aa13ce25c54ecba378d7
SHA1: 4099c26dae6384cc8dd4017da741349aafd94c7f
SHA256: 377a5a80a7b9a1469ec6e9ee414a9f92a907faf46964984eb7be79fd43452aff 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ikPa.docx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ikPa.docx.CRAB MD5: d3d88e545cb4fc7f7011907583dae3d1
SHA1: 9143abdf800f457ad40062834ac10cb1ef6cd06f
SHA256: 2cda032159408fdc8a3c157f4b2b94acf469adfc31248e6417f1eab0b2480bcc 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\JQuaMe2z7aGs3dWDX.docx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\JQuaMe2z7aGs3dWDX.docx.CRAB MD5: 5d59675b34d6c2b2dca3b258af9f9958
SHA1: 6fe3065dd2960ec01e46d4e53c85b841cc872ec9
SHA256: 1259c5582e66cd6435fae2561b7e012287ad87f2345781fc1195e7d13ddbc14c 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\kYva.xls - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\kYva.xls.CRAB MD5: eccbcc18208e3af0817a48ed6f387c9f
SHA1: 468b20743f22778eb383b97b01993a9eddd21228
SHA256: 91fcb8b7ee3bff894b0c42b55ae442de072d599465d5d6e3646230283bd363d2 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\M2WeLu.ods - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\M2WeLu.ods.CRAB MD5: 2f138efab5c24fd81038060b30d4dab0
SHA1: ef96bb4598074ceb52baf975776daaf17a2ba3ab
SHA256: 1d33600bfdc1c48eb6bee9fdd80f3bc54c3536e0661d375c6141eabfe976445f 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\MNNKc4Ezv3kKaQLc5.pdf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\MNNKc4Ezv3kKaQLc5.pdf.CRAB MD5: 039039a16429a2ea0433a408d4457dd2
SHA1: ff7bc9b8193493329b411f9612f973d1c57d8621
SHA256: 8d88a510187e3643229619873660da48f3e1d19ed158128128d830cdfa2784d7 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Music\\CRAB-DECRYPT.txt - Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Pictures\\CRAB-DECRYPT.txt - Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Shapes\_private\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Shapes\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Videos\\CRAB-DECRYPT.txt - Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ooQnXH.docx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ooQnXH.docx.CRAB MD5: ac5b8f5d9e5b3a141d01836a260c8f02
SHA1: 3e523253fb7e88b9c483524925c09bad4203991c
SHA256: bff2ecd37cc9274b2a969908478cde614c0de741c6ba743bb505f658f4fc445d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\voeimd@djhreuu.uhd.pst - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\voeimd@djhreuu.uhd.pst.CRAB MD5: e2a852aa1a099739651515a383417010
SHA1: 012311656f92686bbb5ddc6557b4cce89a5509f3
SHA256: 921418671ccfb155b15314067161900a5f1617bb2e8e6b62ee3590a8316b233c 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\pQUkDiG5hwChEpSnn5c.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\pQUkDiG5hwChEpSnn5c.pptx.CRAB MD5: 2d7ddaad03ac673aa2be2f380da88fe6
SHA1: e38e7724eec4c58a90c98b0955540098f3b01c5b
SHA256: d0bc3123d78a401634f8e5c14f94435fa752082d41135c801e86522720a5b988 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\QKUjPgfvo.xlsx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\QKUjPgfvo.xlsx.CRAB MD5: a5b2054819f61da8532f7b9f2c2d8b9d
SHA1: 5b5b58095a88332fa8f970fce5c49567711502bf
SHA256: 4697f9a237b76e6751d2c8439330f537996a64084d2befbf3cba78dc222f0fe4 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tsPIZ hta.xlsx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tsPIZ hta.xlsx.CRAB MD5: 3e4e69fef0b9b626af0e8f3b48e7b53f
SHA1: aba9c441d47065a898514e62a9482b2600e3b9a9
SHA256: 3aac9957773b5dfd8ebe0eb97de3f318af246e6ec3828de4e68be744723fb188 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\uNax6z HPc TcCEdmvZ.doc - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\uNax6z HPc TcCEdmvZ.doc.CRAB MD5: d49f19171b5223ecf331ea5e22638be3
SHA1: 75bc11b5c118e2befc0d81f212e8c16b2a3eff27
SHA256: c6046f392514551f83d78b871b06563821f0c230a92bc43daba81e4bf60de247 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\uru0-t2xByapqkBWD.docx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\uru0-t2xByapqkBWD.docx.CRAB MD5: 635a86e3893f7efa04d0f8e399690b36
SHA1: 193b470fdb0fe3e2a6dc271b70e3d54fb9961ef6
SHA256: 792b4242fc7d28481b689dcd8d1027a1784f73f615ca9bab484bf9831caafcdd 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UYTTnJ6-zu6hYMxza65.ppt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UYTTnJ6-zu6hYMxza65.ppt.CRAB MD5: ede4ff72d94a33c73949aa4093ca4bbd
SHA1: cc2f4f1cf4612e9b066655dc09be73def1052861
SHA256: 698caed4f9076edf369ccbafc29e2658b9e4efebfb657049cb507fdfd081b0c5 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\V6h3H_Iapu1agSb0w0H.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\V6h3H_Iapu1agSb0w0H.pptx.CRAB MD5: 0b7974610e823a632f65baaf2f03f96f
SHA1: 61cef91a2b9374bfc3b7ed280724d493bc69d17e
SHA256: 12658163a7be47e89f4153c76289b9bb2d67cdcc6c3e36bff1a56db7c4b29f9c 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\W5hG0QrpYH w4vse.pdf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\W5hG0QrpYH w4vse.pdf.CRAB MD5: 8cfc4c1b546b0045b58f929f4dc21a86
SHA1: 90001f324ebc477a72d3a14fefa85b2145452415
SHA256: 3ac423a7392c828ab0dfa2654df8f5a17cb47c46d456bea353a08a716dc3a71f 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\WKWrjUo.xlsx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\WKWrjUo.xlsx.CRAB MD5: e7cd2528d50880ea56613a29d3d82d58
SHA1: 4b3420803ac001627c44141115026558b9808193
SHA256: 271fafc269faea4d581b3c28442bb3316a237d1e8c2a637520b059b8d422942e 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\yg1v.pdf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\yg1v.pdf.CRAB MD5: 21e650e4cdf4199ce1b18a9032b21002
SHA1: 38d5375c819fabaf5d5abf5b925fce3c58c8d852
SHA256: e8856f4167f7325ce2682d7ec6e46cb5e65255704cd90d1dbada1198d920db97 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\YyfJ.pdf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\YyfJ.pdf.CRAB MD5: 0f83aff5c2bd1f594987906725c6a7ef
SHA1: 7c743d2a827ad1eb8021dd3da8c5d85bfd22cb21
SHA256: dae72d163fe3d2fac9e3a4f2a16b4b26fb624a5a9c9924492a61961674184cad 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\z3kydmxLfnPZaSwEJa.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\z3kydmxLfnPZaSwEJa.pptx.CRAB MD5: b5f1ae76ad88ae8b36b38c5a784b3db3
SHA1: 814a19b210a9c7ff568c26ad4f3d0239f46cdc15
SHA256: c2f546c89d3e349dd22c033ff396c7ec1ffa6f12c05f0a03ed734a0f6ec47c0c 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ZpAY87JqInf3N.pptx - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ZpAY87JqInf3N.pptx.CRAB MD5: 60c8a62602bd4697554dd188847b952a
SHA1: 22dda5787da07051da46169509e4ff19e389f6e0
SHA256: 252e75b5922d6cdea3113d70e0b802f3184e23991013d7ad6db92ef44de7c13f 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Downloads\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Suggested Sites.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Suggested Sites.url.CRAB MD5: 301f3acc4308629d7a6c7c50b7065c3d
SHA1: 1c248e237ba60473815716aee09d4a23a9726af4
SHA256: b1476f09edf3184e85a8783d08e0e33aed39e92731b0d0e0b22a745c4c9716ef 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Web Slice Gallery.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\Web Slice Gallery.url.CRAB MD5: f5645d34cb9b02595c39f4314e156ff1
SHA1: 226e474f4973a9281e4bb0a5475520857ba320b6
SHA256: 5a96ac3c89798111c8e434832877585f07c3e78f94cdf8397da7ff4f11689c21 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE Add-on site.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE Add-on site.url.CRAB MD5: 9934323991d0949e2b512ea158c9f93c
SHA1: e3e016fa5d73d6cde6d63408452fefdf38cbc047
SHA256: ce99f02d5cad0810ab59dc246751d5f4f499a7373cdeb71c70ed0e0a34ce8ad1 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE site on Microsoft.com.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\IE site on Microsoft.com.url.CRAB MD5: b451da65a965d83e8ab9067b30d2ba24
SHA1: cc10dd8f0f6e59917259c015f9f5be1f361fe513
SHA256: 2ab3c151d195ab10d8a20194a9b1670fec950577b30b97b5d26bc1e9e7426465 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Home.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Home.url.CRAB MD5: 0d534fa7d0f805ef1fbd5425b6a2480d
SHA1: 6225e7c6a1065ca377da5ed34a59f6aeecee3bfc
SHA256: 9bdef12ff8fb96c3ef7aa758f413f42aa04f1505953f8b9fe628f78b1835e426 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Work.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft At Work.url.CRAB MD5: 3361640ac1145799e366b97c0c0c04b4
SHA1: 6e6b814626dae94e730086aaba6117026cbacc60
SHA256: 91f2c327436bb1e516ba359aba62bad674023469ed996c67f5cf80a5162cdfa3 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft Store.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\Microsoft Store.url.CRAB MD5: 60600725423c5442537b438fab460c26
SHA1: e90536dff8cbf85f97626c93b9550b4a3aa4ee8c
SHA256: 8ded43b4012dbc99e9c256814fc8c7e5f19629b9753c06f429679cc856ffedd6 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Autos.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Autos.url.CRAB MD5: 85ba3ef395a509df3d1f2489aaf0b327
SHA1: 550dcfef6bddef57438c1115aedcaa23bac609f7
SHA256: f9b2b32a35862f1cc440bd9cd1434483198093fe0385b86ec6901584b23e406d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Entertainment.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Entertainment.url.CRAB MD5: b8be4fc25103760e94dbd3c4a1f245f4
SHA1: e6b69263bf6949e7a808c8fc1c3b72e4bfe558f1
SHA256: 862c5682511a26923ae907720c2f38d1c184ef9c1b4a5510d65a860482a525c1 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Money.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Money.url.CRAB MD5: c10b87c9a113dba797009c0466fa26e4
SHA1: 3a2d4424c6b55ac9332f8420dd45076c02454fa8
SHA256: 694a95b52a3639836845d47799f4530628ba7cfb748c5c603da4d4ba7b06ac1b 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Sports.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN Sports.url.CRAB MD5: 08da66ffb46d1f508c533cd7a5f910ef
SHA1: 7108161590b9eba59047e87af8f2b7ab21e29062
SHA256: 2081495c4b18a322e76c848c74d96f8d6669db8558f8ce9de52e368cc2a9b490 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSN.url.CRAB MD5: c9579c3c9710b0c27c2c7d95ec5e60bc
SHA1: 6f139a29465cf9e25b3075a60b85c8df022c3b85
SHA256: d0c7b5980b43305653433a45eaed2fda346ab7dfb9f7bf941ae2668b4351bc04 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSNBC News.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\MSNBC News.url.CRAB MD5: dd17d3506082649c9988be030b064103
SHA1: d18bf9cc6a67104088bbba4dde797de0e581b8d4
SHA256: 732258f0f7ca8a0e07a0d686e7ced2137666b1b6d89bbeb36472894df607e977 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Get Windows Live.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Get Windows Live.url.CRAB MD5: b8a409b8164ff097f6169777e96c4a04
SHA1: 9c8ce2f29e72b00d0c0b2ba81c8565cfab47df0f
SHA256: d8f64af169c3e98cedc4c876d3247c583a2b2334dd47484118e5245de31d2f01 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Gallery.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Gallery.url.CRAB MD5: bf690c857f7116267c3d17f156b31e61
SHA1: 73e1a2c8ae657d5b26aaf5f2cd24640fd0e11407
SHA256: fc9b860e6598f67a8778a76f015d4b2d403e8f99ab8c93809db653c605bc6445 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Mail.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Mail.url.CRAB MD5: bb107b712333143f7335f5cf4611fbfb
SHA1: 8fbdf409e173e6008cf9b29ce2290f8a08b64b76
SHA256: 2b3cd76d549afcbbe1405ec30c835c0c6b9acc4ad244d497b4aab509541486b8 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Spaces.url - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Windows Live\Windows Live Spaces.url.CRAB MD5: 1bdcaabd3d22af1c718a2c5e1faddf24
SHA1: eacd9667c3ad539c3fdbfd422f50fcdeff5f95cf
SHA256: 9f5b1f59c9c7c549fb0b28a61b10144bfa6938b05431ffb713bfad98a6cdcd6e 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Links\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\g7 9LmVDU4UxdOljRf.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\g7 9LmVDU4UxdOljRf.wav.CRAB MD5: d75b74a7c0a1f7eb63d109143502d2bf
SHA1: acbb3d0163ef2923eec145659a915968ce56f72f
SHA256: c9cece4f307bb5de6a489aa72b32179d2d16f1f52d1a850526b1a918b8f7dffa 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\mjiRMOT4cOheC3fu.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\mjiRMOT4cOheC3fu.m4a.CRAB MD5: b21c925bd7139438b2add531d2b797ab
SHA1: d0a287c3e6d8bf61f2de366a9cede69e8b8a0605
SHA256: 657fdd99bd7cac1caf3e7420f3946f8616739dead64abaefad4a93c0100e8d63 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\C94j9NMhpraFuStNat.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\C94j9NMhpraFuStNat.m4a.CRAB MD5: c07a10b6da78e3e2b8023edf192e5c7f
SHA1: 353ff0a59177afcf2d262982a446df164e3a007b
SHA256: 5f0644a8326bbf458ef187adbd0da274261d84f0062cc7f54117287c0eea1ff0 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\inL4q\-NFNeJge5.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\inL4q\-NFNeJge5.m4a.CRAB MD5: e9e54ea2c3fd81f785b7446b342e5e17
SHA1: 66f32481d0d37fe2e7e3093eb49773578a020e51
SHA256: 3031c9f2d67f1ba1444d01d97cd4cbf94c5974f230f4c3acbec7bf7cf7b2944d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\inL4q\-qfJ4ENdv5.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\inL4q\-qfJ4ENdv5.m4a.CRAB MD5: 2de005a701a128dd518fcd838af796af
SHA1: 9081aef4ce18a50254ae9334be522401d801f097
SHA256: 4df06896aa56240405c6a60f0efdd9f3722c57b16e0190f6dabb5ec1bcc4c058 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\inL4q\2CrMfqU.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\inL4q\2CrMfqU.mp3.CRAB MD5: e259e41226c7642cd49485997f957336
SHA1: e085d2dcc70b7e20ca842dafc251921c5fe9545a
SHA256: af2476f4a59235962d0d91c1cae651c5fbec4b527ae2ff0c3d5c6f9bea9973d3 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\inL4q\Cpi6O60qV.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\inL4q\Cpi6O60qV.m4a.CRAB MD5: fddd6d14b6912c19b40d4cd42fc6845c
SHA1: 4f0cdc23b6cec77a642562dceaf70de844bb7f42
SHA256: a0fd728663bbd98bb7600450745407f30e1b5ec23a25c9c589fe1adce39d9d5d 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\inL4q\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\kHVpWZA8qWllLF9RsZ5.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\kHVpWZA8qWllLF9RsZ5.wav.CRAB MD5: b593a406a8183e838056d8a14c73ca3e
SHA1: 8ba9cf361a7ea7c1d58f943848b3280a6824efe6
SHA256: 825026ea1ae22b4add623fae59777d0baeaa5200f4812e2f73c2d5a69adc7dcf 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\nTusvJkocWdJWyrU7.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\nTusvJkocWdJWyrU7.mp3.CRAB MD5: ef434a5abb56ef2ecde469217d7c45a8
SHA1: de2e60818f47ee31edb68d999121042b6318ebe2
SHA256: bf1d3b0469237996ef275abab2df6e234149c8775cb8621f50b5fcf3cf9a6727 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\T c9d3.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\T c9d3.wav.CRAB MD5: 4f93c986ee5cb755dd3c15dac45dbfd0
SHA1: 2a268148acff9c8630cca21013e6f29e7069779d
SHA256: 00263c6ad4873fdc2ee4d9008bd582051a8d3ddc46b40362d6033ddb0a5701a3 		Access, Read, Write
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\0ds3.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\0ds3.wav.CRAB MD5: b18a1136739081184efb081503e05fa2
SHA1: a47723cd076655e459bf85ff491d067a2bd4d8bd
SHA256: 5002b68fce1a1507e964639753817cb92e70713137f3ef2c04be88c66204aa8c 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\3qpftZI8NpnaxRY.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\3qpftZI8NpnaxRY.wav.CRAB MD5: ab3d83f1a206fc59bc4003581764394e
SHA1: 1f99b1faba5302945e3bdf13bb15e78910b77677
SHA256: aee592b3dbe17b0db36b7e205fce9d94bf9e5b692550b563df3f8e76260e5143 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\AdU2bqh8F.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\AdU2bqh8F.mp3.CRAB MD5: 429b4561e54391d47541af04b26ee51c
SHA1: d586e9bb00e67c4e692079d2160fcdb42d33e3a4
SHA256: e592afeb86518c597f6f43f55caca3761a30342fff8d7edf0d8cbf7de6358770 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\FxeMVaKCdnj1x.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\FxeMVaKCdnj1x.mp3.CRAB MD5: 09e72b725042e5daaaf7ea81cdc393d2
SHA1: 34bd3cadec0db51f46da05ffc222863248384c83
SHA256: c9d8bffae4ecaefc9dceace6dac05814ab86a5254a3599bc6aa9e269a0810e62 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\rBv5CX3xmX.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\rBv5CX3xmX.mp3.CRAB MD5: 5b115949b61fc40efc898b67e901c1e0
SHA1: aac71bd354574ee1f245410a7f1255e5383f104a
SHA256: f6f497089ae99f93ec2c857415a6c61da0362654cb01e364a8750a7809c83c8e 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\RdSg2E5.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\RdSg2E5.wav.CRAB MD5: e81fe2f66cb03f98fbb2a7d2cd881eff
SHA1: b4a7c8f6e9697e261dc8c2a13c2ade8f2c720c19
SHA256: a6593da618372675c2ac4f3ec4fba036b77f4c79eac065d83b340ff3b60c8058 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\x0vR.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\x0vR.m4a.CRAB MD5: ae7e9c4817cc6badb6c9ca5910668c25
SHA1: 51039857fb1d507787ac60cf211bc36a6625bb1b
SHA256: 88628e8f6718ee80c95e3648a7b5c8c4757c8841d51ae2ff31def8de1a7bfb86 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\1OnM- n_X9GcX_J\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\1OnM- n_X9GcX_J\gmfigcXZisICjvNz.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\1OnM- n_X9GcX_J\gmfigcXZisICjvNz.mp3.CRAB MD5: 0ece0aa5f1e04918a59a81903955bc9a
SHA1: 7bcf54e7b583c71dd15d31219352799e0b202fb2
SHA256: 3ba074759c45e18776eca62b513c6e09b5352a79b7787faeedbf130f7efe9ad1 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\1OnM- n_X9GcX_J\NtlIXq.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\1OnM- n_X9GcX_J\NtlIXq.m4a.CRAB MD5: ae239349e8a229d3e882f1cc587af5e8
SHA1: 65886b464092635f14df45c0722beffb3843c64a
SHA256: d7ba7fc42aa8552c4e873b6284e9f487eec34ae98b503455c38edd5aee990aae 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\7vzlD80Gbo4j.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\7vzlD80Gbo4j.mp3.CRAB MD5: bfba1e5ee599e9a6838797413283da3b
SHA1: 5274f725b18cac775f89da078ba3aa6a54dbcb84
SHA256: 788c0c3bab118e277d116ff5cc8428f32ad0cea5585f2ad8c9c139deb4c9b416 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\_Wm2uiNrR7.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\_Wm2uiNrR7.wav.CRAB MD5: cd66f75b290d85e51e5d1cbadb9f5920
SHA1: 12a875c65f069cf8382d09dc2e03d6fcfbbfbeb9
SHA256: 89d38df489d9b16a61acd4cd8cd5a9db909787b7cbbcdcb8c85997d58ef2f661 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\fOY0yH.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\fOY0yH.m4a.CRAB MD5: 8e4178613de4e9ce3b23d1c114b7e7f8
SHA1: dbe2a1ae86d8a9d9dd877d21a820212d5f5441f3
SHA256: 65020f8e64a5509ddafd03eafbe5a39f3cbbc094fa8030ca712f54419e09fea1 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\K6kJTr3YDHQI3ZaV.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\K6kJTr3YDHQI3ZaV.mp3.CRAB MD5: 6670ebf15c3e1b970826af3d430f561b
SHA1: 114bed7ec9eb190cbbfdaca95b7db4527bfafb3d
SHA256: 15ddee3c61c44dd423f342a2d4e04573a4b3d4991a79ee9ae93d24531f25a26c 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\pP2S8U.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\pP2S8U.m4a.CRAB MD5: d47371fdbe86e7796e7c73daf00fc356
SHA1: 2c92875bb0cddb5631388b31e57e8c621460286b
SHA256: 6337657e7c26ba953fb8c0b0ce237fc7190fb0879ee7394a62b22637d21bbf99 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\zaB3b7U sn4.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\C06iAVeKw\xXqwypUl\zaB3b7U sn4.m4a.CRAB MD5: 6538acfd1f79f8dca05d6747f0c197b1
SHA1: fd3bd7126e91c8c402e3d50ac47af3dbf2a99731
SHA256: 897157eac2c8c2b924303fc153a64bf645244f3d9eef9d95e8966c7ae4a50881 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\cQCu.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\cQCu.mp3.CRAB MD5: b3f81e1a5f970780cb643758ce1ee255
SHA1: 829c42ba779230ec97723e790a781a8b7addacc8
SHA256: 0cbbfec0432fa61758f72ac11ae368e934b3e0bbb3a67c09a504a5cca65cd831 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\G-JrMNm_nQGjTQyvEsv.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\G-JrMNm_nQGjTQyvEsv.wav.CRAB MD5: f650f44280369bd327f72cb62cd5cad8
SHA1: dea99f2ed84bdb229b3b1eab5510ed0c45d1adfb
SHA256: 3358635d5c8428b835c2c13ed4b3ca1e43309e8f1259e15ddd0d6bde9210b086 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\tvaj5Naf9Xf.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\tvaj5Naf9Xf.mp3.CRAB MD5: 07a48172e99d408e9504524c8b1412d2
SHA1: 33bbf148e93a6374e500db3b8b46197e595704bd
SHA256: 66d035c8edb6b5b9e7c450f3fda25264cb08e8692aa26d1aa72609bd5404791a 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\VVfu7-c\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\VVfu7-c\lsPj23a.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\VVfu7-c\lsPj23a.m4a.CRAB MD5: 3db779210ba176035b9b9db1a3a3150a
SHA1: 6985dde31158f1584ecf19c025f632ae4eb47b00
SHA256: 319c2c3be5391971dec478d19d5dfaa582a347610ee294afb55356441aaac115 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\VVfu7-c\VgLlbhsRwiu5N0yn8C8.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\24endO2rsR15sdp3\VVfu7-c\VgLlbhsRwiu5N0yn8C8.mp3.CRAB MD5: 831063ed358dd0409e2ab41d7e8ec17e
SHA1: 19002def53aef208ec86266db60d21e80ea2e04a
SHA256: a5ce6cf392ef262995ce3c4fca72689dc7bfdb0bed1d964e362cb24fe9a1425b 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\fjgqsHFEGK-A.wav - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\fjgqsHFEGK-A.wav.CRAB MD5: fbf7f253444eb6964b815cdc212878f3
SHA1: 95bcbc78d5a363e4533c9a164601b07dad412b8c
SHA256: bc1f2750ad3b17638eab84a4b1c657ff8f752e751291847f39ab35a60db1ed67 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\Pl4n zcq2FE9N.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\Pl4n zcq2FE9N.m4a.CRAB MD5: 0a053ddf86eeb8bcfaac48c108632fda
SHA1: 8e309260c665db44579989526004b3d03fd6f095
SHA256: aa13922b2d6b1199836929d4a4248775bca69b24bc656bd0490be15409ab3cc1 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\za4gzZM\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\za4gzZM\Gz6Qf6haIBCH0sTZYw.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\za4gzZM\Gz6Qf6haIBCH0sTZYw.m4a.CRAB MD5: 13202037bf10515810934c67f58a1cab
SHA1: 5d0634fb5708c986de799b52e05cfe69c5408794
SHA256: adad2a667e27aab15f75fc27d6975cc7854b080c316f883d8d06067a3eedceda 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\za4gzZM\paZ3FUUpbSCnQA.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\za4gzZM\paZ3FUUpbSCnQA.mp3.CRAB MD5: eb42b7a0f02b7b4a7e386bdbffec3c69
SHA1: 6b5d1c60fcc47d650335bf5c9800cfe7dd4e44d1
SHA256: a0dcb0b9071aa846634882fa9db67b845360aa28d2a28b99ae3160ed043b1389 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\za4gzZM\VK99F3lkW-YDI.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\za4gzZM\VK99F3lkW-YDI.m4a.CRAB MD5: 4aebce1b1a8ea37bee49631cde682ea7
SHA1: 9702074bdc076ee4b1c6519091f1085f31108a29
SHA256: 0115bae74d9909aa7272669e759cb8de4f0b568cbbb9aef3d1f757416298445d 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\zTRhL.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\iN2oi15yT\Xr01\zTRhL.mp3.CRAB MD5: c5db211db973e75d67a9ed4e115bf155
SHA1: 9681101d50caa7b2ef3747a7ad16ce0b0a7a31cb
SHA256: b125f7479312c147f8947cb3233be6630750ccdc66702cf4deb63bf8619d6ad5 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\mxYRQw-Lqfo.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\mxYRQw-Lqfo.mp3.CRAB MD5: 41c1fc22c9adb486ce6c79c4522537ce
SHA1: eb6386b8ffdf2c5a895a30aadeb76b836878a280
SHA256: 4540b5638ddb95efa69ac45f45befb1a149ea9d9659c4f6a50186ad7824d3d47 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\XMTH_q.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6ZV9eaWSn-5\XMTH_q.mp3.CRAB MD5: 2f733d0289fd89262c17d2cbe1658b20
SHA1: dc2f6f06e9008fe4fa0be905918a89e36537aa66
SHA256: 2801d3633dcddf60084f99d6a178e455152b0d53f887506a862b36587c463c18 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\W6_9p6VWT-XF c-flu.m4a - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\W6_9p6VWT-XF c-flu.m4a.CRAB MD5: 0cd422a8afa082e2d2c44f2ea94e82bb
SHA1: 0d7006f2a73e2f93af6f953ffb07be8dd776e19d
SHA256: 82df4e1898468a4f2e3086d960273d59cd2119392fcb352a08d01d10f14c0859 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Music\WkkTGnmuKKcLE0epu.mp3 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Music\WkkTGnmuKKcLE0epu.mp3.CRAB MD5: 2049a20800cbefafa7940f4650f27aec
SHA1: f742bad52a010492c217f4e6f3c7b2a37249960c
SHA256: 7d1ae092bb2b92450245fd66e731e55ede08066a23dcc18c6cd2988b1a32b5f5 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\My Documents\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\NetHood\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.dat.LOG1 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.dat.LOG1.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms - Access
C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms - Access
C:\Users\5p5NrGJn0jS HALPmcxz\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.CRAB - Access
C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.ini - Access
C:\Users\5p5NrGJn0jS HALPmcxz\ntuser.ini.CRAB MD5: 0f0829ea5b36771fc790f46e41c27a1e
SHA1: 9dbc8c229e0b9564337f39c1edd8400b1f811043
SHA256: 6cab7653cc3ae8850d2788db1267eda94c41fab5e9c7ff9a9cb9f282183c2a9e 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\-Tve9F.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\-Tve9F.gif.CRAB MD5: 188c8f5ec13da3b2587c50a30a88e572
SHA1: 059170592f33ffe9b98001bd9f31cd94ee5860a8
SHA256: 2200df7e573f264812bddf68c07a4ca122df33dd6c3e34365e1217a14d85af30 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\0Wo6ya\2VidPaCu 9YEG2dVW.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\0Wo6ya\2VidPaCu 9YEG2dVW.gif.CRAB MD5: b61eb57dc2cb0ce21c89e3631559355a
SHA1: e5b6016c12445b89486752ae961fd56bddb49995
SHA256: 4536247aa3c6f208775fab225375efc3a8df571fefa18dfc9f52170cd2492dee 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\0Wo6ya\3MQOyKdku3e6f.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\0Wo6ya\3MQOyKdku3e6f.bmp.CRAB MD5: d4bfc134f6a66f62b6c782121a94bbb8
SHA1: 860165164404ffe956edc1ebd686dfa682baa628
SHA256: 24d75ba5d5ff80a50ffacbf0d53fbf2fa539a33e7eeab599e1863427c7f36f83 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\0Wo6ya\AcCs5aX.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\0Wo6ya\AcCs5aX.gif.CRAB MD5: 71e0fc9a7644355552f8faeeeac4723a
SHA1: f348018531c5ab2103db8df413b9b8c6ed43c4a2
SHA256: f43ca05cafe7c12414a15f3e1b0627664f0e4652c378654603d6c2987c377689 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\0Wo6ya\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\0Wo6ya\JKT1F.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\0Wo6ya\JKT1F.gif.CRAB MD5: 4c4223e2c350b61faeec7d846e48e092
SHA1: 73e6ccc236578c948d51ee5e022652d9ca4fa08a
SHA256: 22ab5da1f3b08a9ebf3c704837d7a7ea202f1973ad25460170fd3c667fa6f8c8 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\0Wo6ya\m8Z7p0UVYrd.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\0Wo6ya\m8Z7p0UVYrd.jpg.CRAB MD5: 95e0fb7a2512dfcc2c011f0a21c9044f
SHA1: 9af0149a4c065b8f44fba1ed1bec978d96102f7c
SHA256: 4d341960183eaa83f8f1663d4657069645f3c0cdad6cddd586dc50d5f1b948b0 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\0Wo6ya\PqS4yAJ1IhQNB.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\0Wo6ya\PqS4yAJ1IhQNB.bmp.CRAB MD5: 08ea24aabfc8cd30fd53792aa0dfaed6
SHA1: 995f9230e6476bdd27108d87bd568d00a1d3344f
SHA256: f1b39e85f476370ff613e15ede4604bf311875b1d69fe550ec1a7955d7f62ae0 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\0Wo6ya\UJu1tVT_z7h_8jrqa1.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\0Wo6ya\UJu1tVT_z7h_8jrqa1.jpg.CRAB MD5: 54323b7a7a18e31fadde4f5219664ebd
SHA1: b39f306e04e47c4ae02edd097dbeec67eda18889
SHA256: 0eba9ffb4a6458a8f811b375f2296ae4078bf383cbe572bd16f5916c752a0c31 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\0Wo6ya\YGL_pVKGM4m -9Vru.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\0Wo6ya\YGL_pVKGM4m -9Vru.bmp.CRAB MD5: 7fd0c6a3cf2345a828df75576912d9e5
SHA1: 60601bef3b1fe77c7d89484f2107c4aa653b0bc0
SHA256: 939544f2e6307f03fe579ace02df10503ddefc1b6638f4c73c9672cdfe793645 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6gnObpugwk\9F_QS.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6gnObpugwk\9F_QS.gif.CRAB MD5: 7480f54d57f040ce3cb6a95ccaebeb26
SHA1: 5bb7217c9ec79c7130b75ee9f316bc0109de8b1a
SHA256: 8b567320b49fc9f07a0139ded0603cfa61842889782f9b5cf7ac24f8c1bb3e0f 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6gnObpugwk\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6gnObpugwk\IYCHkCFbo-k42Lq8.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6gnObpugwk\IYCHkCFbo-k42Lq8.jpg.CRAB MD5: da37a78b79f2b5cb656924bb9a30125f
SHA1: aaef7ec5f9e651fafa66623e939e8d447d3353fe
SHA256: 6cfa97d86c8899d4786fe6f6110014996753afd652e40cc804b2492cc6c1f227 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6gnObpugwk\LwU4_Og.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6gnObpugwk\LwU4_Og.png.CRAB MD5: 5985f616e66a6bbd9f0ea25cbf04117b
SHA1: 5d9b2aa75c1dce0dc1c25ccea4c3d4a2b75e9a08
SHA256: 8ba784563990f21cc7ec5be1b9ab8664f3a8d3fe6cb1006c9aa1765dc7fa8b91 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6gnObpugwk\n_ymZ48XPZsE76VSxY.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6gnObpugwk\n_ymZ48XPZsE76VSxY.bmp.CRAB MD5: 9e08cec4e44a745d7f3a9fbcdcc1e2a1
SHA1: f660e68eef2f51e16189694ff9289818ddf1225e
SHA256: 199eb810a4a782bae424de3f55c2f9693634f67cabf67f5ada1677a2547237cb 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6gnObpugwk\RwSrbz2742.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6gnObpugwk\RwSrbz2742.jpg.CRAB MD5: 6c2625c405d2f0cf5b7e0102bd6f8d27
SHA1: b7634fe8b0d7f82a2afca9ef96e6a38e59950307
SHA256: 6e74ad83a940328daea8c34e56b7dc562307978d604589f82095b2c976207cda 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6gnObpugwk\tA-cANrz9CV-Gr.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6gnObpugwk\tA-cANrz9CV-Gr.gif.CRAB MD5: 745c049cf045561320d6d46e112b4f2f
SHA1: 9d9dfcf612c9933c108cb38a7dc078fc569f9688
SHA256: e215ded856c9d0f2f58546cc4966fb20270f539a464f2fafd15d29b43a8d63c9 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6gnObpugwk\U72GnwDfp5.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6gnObpugwk\U72GnwDfp5.bmp.CRAB MD5: 5936c0393dffcfdefd51c6b3ec0b5d19
SHA1: 7d3d5884531b130bba5a761bb9a213067ed0054a
SHA256: 14e7de5d29b8218550a8915267f3c4e1ecf1889f3960eece396bb951185c5127 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\9yFX78p3pZeJ.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\9yFX78p3pZeJ.gif.CRAB MD5: 29b95817c3abe8e1ec9e3823bb0df40a
SHA1: 9c825328e19d36e89238082ec08b66611750aaae
SHA256: a5d4b53a52e940a67c680801acfe06abb41637108e0bf3533ccc2fb0ebcc26f7 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\av8nEXdgW.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\av8nEXdgW.png.CRAB MD5: 48f95e58a5de71d2d631f6d8ffcac236
SHA1: 9c6e15efc1034c95e47017f0d406fa4a9e035044
SHA256: 6c86c6b1f802d1b76f054f8de2df002aafb46c89a91187a8ad228587e0afa684 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\DlUp7nguzfKm.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\DlUp7nguzfKm.bmp.CRAB MD5: 3f5dc54607846dfcf3e94c4737dad8ed
SHA1: 5ddce02ad2083926e982c869191ca5c18c0f99a9
SHA256: 45d26bb0cce46408b57a7057114076758a8d236e3f300ca17243177d137e9b0e 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\niOxokjW1gjl.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\niOxokjW1gjl.png.CRAB MD5: e305a12d4ddfafaf4cbcabafb737e1e6
SHA1: cc1d03f7cdbae39bf74d73c2e2522948a804af7c
SHA256: debcc97b560554a2f01d8b6081267747a32ff81947579e3b2d5a070e5917b05c 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\8Fz7Awe3ry9CqPnp_CO\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\8Fz7Awe3ry9CqPnp_CO\HLLB7HtbFJA_5ZvC.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\8Fz7Awe3ry9CqPnp_CO\HLLB7HtbFJA_5ZvC.jpg.CRAB MD5: 4ae728be9cdfa7f7b35a3a9a49be3e0f
SHA1: 5b13697c4d3d0371300045669dd5a35dd2a45936
SHA256: e74fd7b64dfa9d1f3728c51f554b468f5891dd8c8b678eb19f75e6de25a650e3 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\8Fz7Awe3ry9CqPnp_CO\IlgvlLW.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\8Fz7Awe3ry9CqPnp_CO\IlgvlLW.gif.CRAB MD5: 026e9bee62c5c2ad3c860f72c87b574b
SHA1: 13be0165650234e7563a3f8561bf5de085dee436
SHA256: 791d60c0873414ebec8ee28e0f0db9bc215e08d52a242ecd93ab4306a10baf8f 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\EPMebyjIVITzf6o.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\EPMebyjIVITzf6o.gif.CRAB MD5: 73cfa04374c2745be3c989a9cf4e186d
SHA1: 9ea13ed6be6894a1963281997522ada2bccd1607
SHA256: 370cdc9091a758dc09cef30a8e84365153af26bc6196c15cf648ed92cef7ee35 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\jdybdm.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\jdybdm.gif.CRAB MD5: bf9883210dfa487f75b6573b355ab14e
SHA1: 71d1e1098eef0d769a181416743faac107b37706
SHA256: c16c861be363b61fe40f9c25e9a7cf528e074e44ed0bacd077392ae124b96d6c 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\3wnOk7lguNIEjO.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\3wnOk7lguNIEjO.bmp.CRAB MD5: 9adc8bc97463900620f95b6d73337713
SHA1: af266aecbee1844103f8ab36e77bd02b4b12401e
SHA256: 8d4f365bbd77f9afbe380a887103cdaa9ec202b64542ab584c6b23c14b197591 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\_bc3H9nScU0UzUNI.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\_bc3H9nScU0UzUNI.jpg.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\bXzv Cr.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\bXzv Cr.png.CRAB MD5: 933ab24b3b87861bdd4000230dc5b841
SHA1: 4cf16b94ecfcc763d61be6f84269b516c479269b
SHA256: 80465054fdb0a681f81995377e6e8eecfdc1e4126166baa25b12a6ac871c5c78 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\CxD-mRrA.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\CxD-mRrA.gif.CRAB MD5: 043417027f5fa522350564337505c4ea
SHA1: e4e9e519f6f66dc1b76df66e1b5b4546bc1635a8
SHA256: 622f6601b5e59019ece2e9a79e120c4b80731ea9c4355532233a6ec27d2fc2f7 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\i7bysmfGkjW8gx 1\6JBor gV.jpg - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\i7bysmfGkjW8gx 1\6JBor gV.jpg.CRAB MD5: 8407ee7f0f434e9cf2f50db9dd944cae
SHA1: 71b0a068c10eca1dfdcf6d28566c0bb3defef23a
SHA256: ff306bde661d2f5368e270332f2ed6802975ff413d6662136dad03ae60e4722e 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\i7bysmfGkjW8gx 1\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\i7bysmfGkjW8gx 1\FttuLQQe.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\i7bysmfGkjW8gx 1\FttuLQQe.bmp.CRAB MD5: 506ba15544411c7c0b98260cd85b0e82
SHA1: b8d40ed04c5da420dca5211a98eeac108c780451
SHA256: 5c3c7373cfde74560cee3da27a002f6b90d3bc3f1926de33419bdda5df3ba1b9 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\i7bysmfGkjW8gx 1\u09D7Fr4iSHqNbDa.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\i7bysmfGkjW8gx 1\u09D7Fr4iSHqNbDa.gif.CRAB MD5: a474039acd215e9731118342f1d3f21e
SHA1: 0053a90e33587bbb6d8ad53c99a87e8250bcaf24
SHA256: e19c66c8b7f140ae4b9db389aca6e93fec23375f4861c97f2906a221b31605dc 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\j7 4Uy.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\j7 4Uy.png.CRAB MD5: a6a7e554c10ca569d421c1e55a84e49c
SHA1: 83744483fdbce520eb9e41b890f7ea281cdf1c30
SHA256: ad76297e7d960de4f567a9a6677557e5e595f49d6b747a870f1ce1e7f869e9e9 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\jluw_zq5f\-3DbJl.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\jluw_zq5f\-3DbJl.png.CRAB MD5: 064c090eb88660f2e0b595f18ef26165
SHA1: b105731597c2508055c30e48ae44825e21a5da40
SHA256: d34d2bed468fd08d0badbc9af7ee8c9b5d87ecee7bd438e9836c44f0b9ab91a5 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\jluw_zq5f\58XcGtWF cs3ST.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\jluw_zq5f\58XcGtWF cs3ST.png.CRAB MD5: 4d351eca14da1e9d35a23906d87046da
SHA1: 1dcfcbbfa11cc946aa219da17801a16cc474e82f
SHA256: 080420262dcff653a6373d092e53af3b8a004efa416c027fd58605569f374d07 		Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\jluw_zq5f\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\jluw_zq5f\LfojX 3 p7QcnwNdWu.bmp - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\jluw_zq5f\LfojX 3 p7QcnwNdWu.bmp.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\Nn1r3yCyO.png - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\lM81\Nn1r3yCyO.png.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\WiS3MaIREpQ.gif - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\T7skZDy8\WiS3MaIREpQ.gif.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\PrintHood\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Recent\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Saved Games\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Searches\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Everywhere.search-ms - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Everywhere.search-ms.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Indexed Locations.search-ms - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Searches\Indexed Locations.search-ms.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\SendTo\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Start Menu\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Templates\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\DfsrCIZtngHXAFTX\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\DfsrCIZtngHXAFTX\jqIzN\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\DfsrCIZtngHXAFTX\Qq32NQLQlVgFr.mkv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\DfsrCIZtngHXAFTX\Qq32NQLQlVgFr.mkv.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\DfsrCIZtngHXAFTX\SbHIW0yyIDxLA1tcWH.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\DfsrCIZtngHXAFTX\SbHIW0yyIDxLA1tcWH.swf.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\DfsrCIZtngHXAFTX\YVhHS.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\DfsrCIZtngHXAFTX\YVhHS.swf.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\g2DX\9I4Af-f6bZK.mp4 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\g2DX\9I4Af-f6bZK.mp4.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\g2DX\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\g2DX\EGVNUP6mLGahlKPD.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\g2DX\EGVNUP6mLGahlKPD.avi.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\g2DX\OB8xHrr1Toa.mp4 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\g2DX\OB8xHrr1Toa.mp4.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\g2DX\S6rye.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\g2DX\S6rye.flv.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\ThQLOXB.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\ThQLOXB.avi.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\X1AqyMsXZe.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\X1AqyMsXZe.flv.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\Zz43St.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-_32ZLgNLPezDM4M\Zz43St.avi.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\DQmcxpf1XituVjs24q7.mkv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\DQmcxpf1XituVjs24q7.mkv.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gaFmvndZ.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gaFmvndZ.avi.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hy1N1n8uc.mkv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hy1N1n8uc.mkv.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ONPO_AAZxIRr8TUH5L9.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ONPO_AAZxIRr8TUH5L9.flv.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\3_dmLGBGk6cNicZg6.mp4 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\3_dmLGBGk6cNicZg6.mp4.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\7KLw2ZL Kc0lLpIH0Va.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\7KLw2ZL Kc0lLpIH0Va.flv.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\6a5jD8.mp4 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\6a5jD8.mp4.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\9xrVE\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\9xrVE\UoHjdL.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\9xrVE\UoHjdL.swf.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\NsuUM.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\NsuUM.swf.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\Re2S-SuRvYRj\5yp6FGcXy.mp4 - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\Re2S-SuRvYRj\5yp6FGcXy.mp4.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\Re2S-SuRvYRj\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\Re2S-SuRvYRj\dJpwMU BFFQDptx_uo.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\Re2S-SuRvYRj\dJpwMU BFFQDptx_uo.swf.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\Re2S-SuRvYRj\DyqZx 8VaAE1kaf5.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\Re2S-SuRvYRj\DyqZx 8VaAE1kaf5.flv.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\Re2S-SuRvYRj\tT2PPRaLCU.flv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\Re2S-SuRvYRj\tT2PPRaLCU.flv.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\ylPUNHggP3.swf - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\PKfTsB_nvAbGesY\ylPUNHggP3.swf.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\pVDfQX-LJvjPNaETw75\\CRAB-DECRYPT.txt - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\pVDfQX-LJvjPNaETw75\H3skOHW84q7wQJbd3u.mkv - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oTb1nwQ OXM-HbbNum5\pVDfQX-LJvjPNaETw75\H3skOHW84q7wQJbd3u.mkv.CRAB - Access, Read
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\yqD0_nRjk3.avi - Access
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\yqD0_nRjk3.avi.CRAB - Access, Read
C:\Users\5P5NRG~1\AppData\Local\Temp - Access
b32.exe MD5: 2a5926e061c5cf3c6f8bb8908464468a
SHA1: d256701b40efd72f2ed9c0ebacdea162926590cd
SHA256: c0db3c329592294a81f23c37e701a189110913c17d1371bc625a3eae97f37a94 		Access, Read
C:\Users\5P5NRG~1\AppData\Local\Temp\\pidor.bmp - Access
u32.tmp MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 		Access
C:\Users\\CRAB-DECRYPT.txt MD5: 2e9000662d1fb6a630239fe8ddd82d58
SHA1: b49255836e981cbd01b0b78691dbf6adc566b8a0
SHA256: c18f20d38ca72a4aff75afb404987261f5ee963c3ea506340616bd55dc654602 		Access
C:\Users\Default User\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Application Data\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\History\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Credentials\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\1NBUR4HR\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\6ASVN7J7\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\D68G7BIJ\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\index.dat - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\index.dat.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\KQMHSVKD\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\FeedsStore.feedsdb-ms - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\FeedsStore.feedsdb-ms.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Home~.feed-ms - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Home~.feed-ms.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Work~.feed-ms - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Work~.feed-ms.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\MSNBC News~.feed-ms - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\MSNBC News~.feed-ms.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Web Slice Gallery~.feed-ms - Access
C:\Users\Default\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Web Slice Gallery~.feed-ms.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\brndlog.bak - Access
C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\brndlog.bak.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\brndlog.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\brndlog.txt.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Internet Explorer\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\CurrentDatabase_372.wmdb - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\CurrentDatabase_372.wmdb.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\LocalMLS_3.wmdb - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\LocalMLS_3.wmdb.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\01_Music_auto_rated_at_5_stars.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\01_Music_auto_rated_at_5_stars.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\02_Music_added_in_the_last_month.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\02_Music_added_in_the_last_month.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\03_Music_rated_at_4_or_5_stars.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\03_Music_rated_at_4_or_5_stars.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\04_Music_played_in_the_last_month.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\04_Music_played_in_the_last_month.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\05_Pictures_taken_in_the_last_month.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\05_Pictures_taken_in_the_last_month.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\06_Pictures_rated_4_or_5_stars.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\06_Pictures_rated_4_or_5_stars.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\07_TV_recorded_in_the_last_week.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\07_TV_recorded_in_the_last_week.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\08_Video_rated_at_4_or_5_stars.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\08_Video_rated_at_4_or_5_stars.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\09_Music_played_the_most.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\09_Music_played_the_most.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\10_All_Music.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\10_All_Music.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\11_All_Pictures.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\11_All_Pictures.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\12_All_Video.wpl - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\12_All_Video.wpl.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00010C6E\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\edb00001.log - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\edb00001.log.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\WindowsMail.MSMessageStore - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\WindowsMail.MSMessageStore.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\WindowsMail.pat - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Backup\new\WindowsMail.pat.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb.chk - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb.chk.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb.log - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb.log.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb00001.log - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edb00001.log.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edbres00001.jrs - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edbres00001.jrs.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edbres00002.jrs - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\edbres00002.jrs.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\oeold.xml - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\oeold.xml.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Bears.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Bears.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Bears.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Bears.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Garden.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Garden.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Garden.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Garden.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Green Bubbles.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Green Bubbles.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\GreenBubbles.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\GreenBubbles.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Hand Prints.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Hand Prints.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\HandPrints.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\HandPrints.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Orange Circles.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Orange Circles.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\OrangeCircles.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\OrangeCircles.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Peacock.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Peacock.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Peacock.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Peacock.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Shades of Blue.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Shades of Blue.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\ShadesOfBlue.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\ShadesOfBlue.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Soft Blue.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Soft Blue.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\SoftBlue.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\SoftBlue.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Stars.htm - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Stars.htm.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Stars.jpg - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Stars.jpg.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\WindowsMail.MSMessageStore - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\WindowsMail.MSMessageStore.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\WindowsMail.pat - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\WindowsMail.pat.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Media\12.0\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.DTD - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.DTD.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML.CRAB - Access, Read
C:\Users\Default\AppData\Local\Microsoft\Windows Media\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\Gadgets\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\Settings.ini - Access
C:\Users\Default\AppData\Local\Microsoft\Windows Sidebar\Settings.ini.CRAB - Access, Read
C:\Users\Default\AppData\Local\Temp\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Local\Temporary Internet Files\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\LocalLow\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\LocalLow\Microsoft\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B2238AACCEDC3F1FFE8E7EB5F575EC9 - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B2238AACCEDC3F1FFE8E7EB5F575EC9.CRAB - Access, Read
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B2238AACCEDC3F1FFE8E7EB5F575EC9 - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B2238AACCEDC3F1FFE8E7EB5F575EC9.CRAB - Access, Read
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015 - Access
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015.CRAB - Access, Read
C:\Users\Default\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Identities\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Identities\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Credentials\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Crypto\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Crypto\RSA\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Protect\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Protect\CREDHIST - Access
C:\Users\Default\AppData\Roaming\Microsoft\Protect\CREDHIST.CRAB - Access, Read
C:\Users\Default\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9 - Access
C:\Users\Default\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.CRAB - Access, Read
C:\Users\Default\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred - Access
C:\Users\Default\AppData\Roaming\Microsoft\Protect\S-1-5-21-3111613574-2524581245-2586426736-500\Preferred.CRAB - Access, Read
C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificates\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificates\My\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\\CRAB-DECRYPT.txt - Access
C:\Users\Default\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Application Data\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Contacts\Administrator.contact - Access
C:\Users\Default\Contacts\Administrator.contact.CRAB - Access, Read
C:\Users\Default\Contacts\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Cookies\\CRAB-DECRYPT.txt - Access
C:\Users\Default\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Desktop\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Documents\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Documents\My Music\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Documents\My Pictures\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Documents\My Videos\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Downloads\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Favorites\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Favorites\Links\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Favorites\Links\Web Slice Gallery.url - Access
C:\Users\Default\Favorites\Links\Web Slice Gallery.url.CRAB - Access, Read
C:\Users\Default\Favorites\Microsoft Websites\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Favorites\Microsoft Websites\IE Add-on site.url - Access
C:\Users\Default\Favorites\Microsoft Websites\IE Add-on site.url.CRAB - Access, Read
C:\Users\Default\Favorites\Microsoft Websites\IE site on Microsoft.com.url - Access
C:\Users\Default\Favorites\Microsoft Websites\IE site on Microsoft.com.url.CRAB - Access, Read
C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Home.url - Access
C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Home.url.CRAB - Access, Read
C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Work.url - Access
C:\Users\Default\Favorites\Microsoft Websites\Microsoft At Work.url.CRAB - Access, Read
C:\Users\Default\Favorites\Microsoft Websites\Microsoft Store.url - Access
C:\Users\Default\Favorites\Microsoft Websites\Microsoft Store.url.CRAB - Access, Read
C:\Users\Default\Favorites\MSN Websites\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Favorites\MSN Websites\MSN Autos.url - Access
C:\Users\Default\Favorites\MSN Websites\MSN Autos.url.CRAB - Access, Read
C:\Users\Default\Favorites\MSN Websites\MSN Entertainment.url - Access
C:\Users\Default\Favorites\MSN Websites\MSN Entertainment.url.CRAB - Access, Read
C:\Users\Default\Favorites\MSN Websites\MSN Money.url - Access
C:\Users\Default\Favorites\MSN Websites\MSN Money.url.CRAB - Access, Read
C:\Users\Default\Favorites\MSN Websites\MSN Sports.url - Access
C:\Users\Default\Favorites\MSN Websites\MSN Sports.url.CRAB - Access, Read
C:\Users\Default\Favorites\MSN Websites\MSN.url - Access
C:\Users\Default\Favorites\MSN Websites\MSN.url.CRAB - Access, Read
C:\Users\Default\Favorites\MSN Websites\MSNBC News.url - Access
C:\Users\Default\Favorites\MSN Websites\MSNBC News.url.CRAB - Access, Read
C:\Users\Default\Favorites\Windows Live\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Favorites\Windows Live\Get Windows Live.url - Access
C:\Users\Default\Favorites\Windows Live\Get Windows Live.url.CRAB - Access, Read
C:\Users\Default\Favorites\Windows Live\Windows Live Gallery.url - Access
C:\Users\Default\Favorites\Windows Live\Windows Live Gallery.url.CRAB - Access, Read
C:\Users\Default\Favorites\Windows Live\Windows Live Mail.url - Access
C:\Users\Default\Favorites\Windows Live\Windows Live Mail.url.CRAB - Access, Read
C:\Users\Default\Favorites\Windows Live\Windows Live Spaces.url - Access
C:\Users\Default\Favorites\Windows Live\Windows Live Spaces.url.CRAB - Access, Read
C:\Users\Default\Links\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Music\\CRAB-DECRYPT.txt - Access
C:\Users\Default\My Documents\\CRAB-DECRYPT.txt - Access
C:\Users\Default\NetHood\\CRAB-DECRYPT.txt - Access
C:\Users\Default\NTUSER.DAT.LOG1 - Access
C:\Users\Default\NTUSER.DAT.LOG1.CRAB - Access, Read
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf - Access
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.CRAB - Access, Read
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms - Access
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.CRAB - Access, Read
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms - Access
C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.CRAB - Access, Read
C:\Users\Default\ntuser.ini - Access
C:\Users\Default\ntuser.ini.CRAB - Access, Read
C:\Users\Default\Pictures\\CRAB-DECRYPT.txt - Access
C:\Users\Default\PrintHood\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Recent\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Saved Games\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Searches\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Searches\Everywhere.search-ms - Access
C:\Users\Default\Searches\Everywhere.search-ms.CRAB - Access, Read
C:\Users\Default\Searches\Indexed Locations.search-ms - Access
C:\Users\Default\Searches\Indexed Locations.search-ms.CRAB - Access, Read
C:\Users\Default\SendTo\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Start Menu\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Templates\\CRAB-DECRYPT.txt - Access
C:\Users\Default\Videos\\CRAB-DECRYPT.txt - Access
C:\Users\Public\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Documents\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Documents\My Music\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Documents\My Pictures\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Documents\My Videos\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Downloads\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Favorites\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Libraries\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Libraries\RecordedTV.library-ms - Access
C:\Users\Public\Libraries\RecordedTV.library-ms.CRAB - Access, Read
C:\Users\Public\Music\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Music\Sample Music\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Music\Sample Music\Kalimba.mp3 - Access
C:\Users\Public\Music\Sample Music\Kalimba.mp3.CRAB - Access, Read
C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3 - Access
C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3.CRAB - Access, Read
C:\Users\Public\Music\Sample Music\Sleep Away.mp3 - Access
C:\Users\Public\Music\Sample Music\Sleep Away.mp3.CRAB - Access, Read
C:\Users\Public\Pictures\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg.CRAB - Access, Read
C:\Users\Public\Pictures\Sample Pictures\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Pictures\Sample Pictures\Desert.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Desert.jpg.CRAB - Access, Read
C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg.CRAB - Access, Read
C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg.CRAB - Access, Read
C:\Users\Public\Pictures\Sample Pictures\Koala.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Koala.jpg.CRAB - Access, Read
C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg.CRAB - Access, Read
C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg.CRAB - Access, Read
C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg - Access
C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg.CRAB - Access, Read
C:\Users\Public\Recorded TV\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Recorded TV\Sample Media\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv - Access
C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv.CRAB - Access, Read
C:\Users\Public\Videos\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Videos\Sample Videos\\CRAB-DECRYPT.txt - Access
C:\Users\Public\Videos\Sample Videos\Wildlife.wmv - Access
C:\Users\Public\Videos\Sample Videos\Wildlife.wmv.CRAB - Access, Read
Registry (17)
»
Registry Key Name Operations
HKEY_CURRENT_USER\Control Panel\International Access, Read
HKEY_CURRENT_USER\Keyboard Layout\Preload Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows Script Host\Settings Access, Read
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System Access
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Script\Features Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce Access, Write
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\COM3 Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Scripting Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows Script Host\Settings Access, Read
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DNSClient Access
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters Access, Read
Mutex (1)
»
Mutex Name Operations
Global\pc_group=WORKGROUP&ransom_id=e65fbbbf9c354b42 Access
URL (5)
»
URL Operations
http://95.142.39.142/?MTAzNDE3&ofvcTlM&NOhFPrkEXYygcYr=c2Vh&XFZaDrsXTiVcOS=c2Vh&CQXjFXpCD=bWF0Y2h1cA==&uZwiNDOCVY=c3BvcnQ=&DGPafWFTVR=c2My&fdfsdf3gf=xXzQMvWebRXQCJ3EKvncT6NEMVHRHkCL2YqdmrHVefjaelWkzrfFTF_yozKATgSG6_dtdfJR&t4dsdfa4=DQbiiUHRfwQ1n49cBwsS9K6n20XUnUefh8SH-UCEYA5M-pOUFLcz2VX9yLMkc8Mm90vC62Jg&KMWDJCCKgTcdNl=cmVzb3J0&wAORzkZnO=cmVzb3J0 GET
http://95.142.39.142/?MzUzMTAy&ZNAVNHmAYOK&fdfsdf3gf=wn_QMvXcLxXQFYbCKuXDSKZDKU7WGUaVw4-dhMG3YprNfynz0uzURnLytASVVFmRrbMdL7dTO&rqWIetbNyd=Zmx5&t4dsdfa4=VLjiRGDegE0zY9aUFNG9v2v30aGzBXJiZaL_xCMYQxG95qdE7UL0VT8zrgdecIkzibfqWBT_A&hqNrCjJSgrWztKY=c2Vh&devbnQaWlmZ=cmVzb3J0&JVcVIIe=c2My&HheAqNwtJfbNda=c2hha2U=&YiuYJvmcJMhvOk=c3BvcnQ=&PQYFBaAantoAeLc=c3BvcnQ= GET
ipv4bot.whatismyipaddress.com/ GET
193.107.99.167/eeploreza POST
46.40.123.136/phow POST
IP (6)
»
IP Protocols
95.142.39.142 HTTP, TCP
94.249.60.127 DNS, UDP
89.203.10.56 DNS, UDP
189.75.183.21 DNS, UDP
193.107.99.167 HTTP, TCP
46.40.123.136 HTTP, TCP
Export IOCs
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image