Xcitium Cloud Verdict

File Name: LixoDestructive.exe

File Type: PE32 executable (GUI) Intel 80386, for MS Windows

SHA1: 2add11e25d07dc9e154ae1be916c869804047146

MD5: 7d538a430eb4e0bfd7671b921a8b76a1

Download Kill Chain Report

Accessed Files

C:\Users\user\AppData\Local\Temp\api-ms-win-core-fibers-l1-1-1.DLL
C:\Windows\System32\api-ms-win-core-fibers-l1-1-1.DLL
C:\Windows\system\api-ms-win-core-fibers-l1-1-1.DLL
C:\Windows\api-ms-win-core-fibers-l1-1-1.DLL
C:\ProgramData\Oracle\Java\javapath\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Windows\System32\wbem\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Program Files\Microsoft Network Monitor 3\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Program Files (x86)\Universal Extractor\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Program Files (x86)\Universal Extractor\bin\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Python27\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Python27\Scripts\api-ms-win-core-fibers-l1-1-1.DLL
- C:\tools\sysinternals\api-ms-win-core-fibers-l1-1-1.DLL
- C:\tools\api-ms-win-core-fibers-l1-1-1.DLL
- C:\tools\IDA_Pro_v6\python\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Users\user\AppData\Local\Temp\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\System32\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\system\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\api-ms-win-core-localization-l1-2-1.DLL
- C:\ProgramData\Oracle\Java\javapath\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\System32\wbem\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-core-localization-l1-2-1.DLL
- C:\Program Files\Microsoft Network Monitor 3\api-ms-win-core-localization-l1-2-1.DLL
- C:\Program Files (x86)\Universal Extractor\api-ms-win-core-localization-l1-2-1.DLL
- C:\Program Files (x86)\Universal Extractor\bin\api-ms-win-core-localization-l1-2-1.DLL
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\api-ms-win-core-localization-l1-2-1.DLL
- C:\Python27\api-ms-win-core-localization-l1-2-1.DLL
- C:\Python27\Scripts\api-ms-win-core-localization-l1-2-1.DLL
- C:\tools\sysinternals\api-ms-win-core-localization-l1-2-1.DLL
- C:\tools\api-ms-win-core-localization-l1-2-1.DLL
- C:\tools\IDA_Pro_v6\python\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\WinNet.exe
- C:\Windows\Fonts\staticcache.dat
- \Device\KsecDD
- C:\Windows\Globalization\Sorting\sortdefault.nls
- C:\Windows\System32\Scanner.exe
- C:\Windows\calc.exe
- C:\Users\user\AppData\Local\Temp\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Windows\System32\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Windows\system\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Windows\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\ProgramData\Oracle\Java\javapath\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Windows\System32\wbem\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Program Files\Microsoft Network Monitor 3\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Program Files (x86)\Universal Extractor\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Program Files (x86)\Universal Extractor\bin\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Python27\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Python27\Scripts\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\tools\sysinternals\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\tools\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\tools\IDA_Pro_v6\python\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Windows\System32\tzres.dll
- \??\PhysicalDrive0
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x89\xa0\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x89\xa2\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x89\xa4\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x89\xa6\xc4\xa6
- C:\Users\user\AppData\Local\Temp\This is just the beginning my friend!
- C:\Users\user\AppData\Local\Temp\his is just the beginning my friend!
- C:\Users\user\AppData\Local\Temp\is is just the beginning my friend!
- C:\Users\user\AppData\Local\Temp\s is just the beginning my friend!
- C:\Users\user\AppData\Local\Temp\ is just the beginning my friend!
- C:\Users\user\AppData\Local\Temp\is just the beginning my friend!
- C:\Users\user\AppData\Local\Temp\s just the beginning my friend!
- C:\Users\user\AppData\Local\Temp\ just the beginning my friend!
- C:\Users\user\AppData\Local\Temp\just the beginning my friend!
- C:\Users\user\AppData\Local\Temp\ust the beginning my friend!
- C:\Users\user\AppData\Local\Temp\st the beginning my friend!
- C:\Users\user\AppData\Local\Temp\t the beginning my friend!
- C:\Users\user\AppData\Local\Temp\ the beginning my friend!
- C:\Users\user\AppData\Local\Temp\the beginning my friend!
- C:\Users\user\AppData\Local\Temp\he beginning my friend!
- C:\Users\user\AppData\Local\Temp\e beginning my friend!
- C:\Users\user\AppData\Local\Temp\ beginning my friend!
- C:\Users\user\AppData\Local\Temp\beginning my friend!
- C:\Users\user\AppData\Local\Temp\eginning my friend!
- C:\Users\user\AppData\Local\Temp\ginning my friend!
- C:\Users\user\AppData\Local\Temp\inning my friend!
- C:\Users\user\AppData\Local\Temp\nning my friend!
- C:\Users\user\AppData\Local\Temp\ning my friend!
- C:\Users\user\AppData\Local\Temp\ing my friend!
- C:\Users\user\AppData\Local\Temp\ng my friend!
- C:\Users\user\AppData\Local\Temp\g my friend!
- C:\Users\user\AppData\Local\Temp\ my friend!
- C:\Users\user\AppData\Local\Temp\my friend!
- C:\Users\user\AppData\Local\Temp\y friend!
- C:\Users\user\AppData\Local\Temp\ friend!
- C:\Users\user\AppData\Local\Temp\friend!
- C:\Users\user\AppData\Local\Temp\riend!
- C:\Users\user\AppData\Local\Temp\iend!
- C:\Users\user\AppData\Local\Temp\end!
- C:\Users\user\AppData\Local\Temp\nd!
- C:\Users\user\AppData\Local\Temp\d!
- C:\Users\user\AppData\Local\Temp\!
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x8a\xb2\xc4\xa6
- C:\Users\user\AppData\Local\Temp\Lixo.exe - ur fucked up
- C:\Users\user\AppData\Local\Temp\ixo.exe - ur fucked up
- C:\Users\user\AppData\Local\Temp\xo.exe - ur fucked up
- C:\Users\user\AppData\Local\Temp\o.exe - ur fucked up
- C:\Users\user\AppData\Local\Temp\.exe - ur fucked up
- C:\Users\user\AppData\Local\Temp\exe - ur fucked up
- C:\Users\user\AppData\Local\Temp\xe - ur fucked up
- C:\Users\user\AppData\Local\Temp\e - ur fucked up
- C:\Users\user\AppData\Local\Temp\ - ur fucked up
- C:\Users\user\AppData\Local\Temp\- ur fucked up
- C:\Users\user\AppData\Local\Temp\ ur fucked up
- C:\Users\user\AppData\Local\Temp\ur fucked up
- C:\Users\user\AppData\Local\Temp\r fucked up
- C:\Users\user\AppData\Local\Temp\ fucked up
- C:\Users\user\AppData\Local\Temp\fucked up
- C:\Users\user\AppData\Local\Temp\ucked up
- C:\Users\user\AppData\Local\Temp\cked up
- C:\Users\user\AppData\Local\Temp\ked up
- C:\Users\user\AppData\Local\Temp\ed up
- C:\Users\user\AppData\Local\Temp\d up
- C:\Users\user\AppData\Local\Temp\ up
- C:\Users\user\AppData\Local\Temp\up
- C:\Users\user\AppData\Local\Temp\p
- C:\Users\user\AppData\Local\Temp
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x8b\xa4\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x8b\xa6\xc4\xa6
- C:\Users\user\AppData\Local\Temp\Pneumonoultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\neumonoultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\eumonoultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\umonoultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\monoultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\onoultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\noultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\oultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\ultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\ltramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\tramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\ramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\amicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\microscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\icroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\croscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\roscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\oscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\scopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\copicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\opicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\picosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\icosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\cosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\osilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\silicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\ilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\licovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\icovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\covolcanoconiosis
- C:\Users\user\AppData\Local\Temp\ovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\volcanoconiosis
- C:\Users\user\AppData\Local\Temp\olcanoconiosis
- C:\Users\user\AppData\Local\Temp\lcanoconiosis
- C:\Users\user\AppData\Local\Temp\canoconiosis
- C:\Users\user\AppData\Local\Temp\anoconiosis
- C:\Users\user\AppData\Local\Temp\noconiosis
- C:\Users\user\AppData\Local\Temp\oconiosis
- C:\Users\user\AppData\Local\Temp\coniosis
- C:\Users\user\AppData\Local\Temp\oniosis
- C:\Users\user\AppData\Local\Temp\niosis
- C:\Users\user\AppData\Local\Temp\iosis
- C:\Users\user\AppData\Local\Temp\osis
- C:\Users\user\AppData\Local\Temp\sis
- C:\Users\user\AppData\Local\Temp\is
- C:\Users\user\AppData\Local\Temp\s
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x8d\x84\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x8d\x86\xc4\xa6
- C:\Users\user\AppData\Local\Temp\All I do is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\ll I do is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\l I do is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\ I do is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\I do is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\ do is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\do is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\o is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\ is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\s work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\ work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\ork, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\rk, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\k, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\ work, work, I quit!
- C:\Users\user\AppData\Local\Temp\work, work, I quit!
- C:\Users\user\AppData\Local\Temp\ork, work, I quit!
- C:\Users\user\AppData\Local\Temp\rk, work, I quit!
- C:\Users\user\AppData\Local\Temp\k, work, I quit!
- C:\Users\user\AppData\Local\Temp\, work, I quit!
- C:\Users\user\AppData\Local\Temp\ work, I quit!
- C:\Users\user\AppData\Local\Temp\work, I quit!
- C:\Users\user\AppData\Local\Temp\ork, I quit!
- C:\Users\user\AppData\Local\Temp\rk, I quit!
- C:\Users\user\AppData\Local\Temp\k, I quit!
- C:\Users\user\AppData\Local\Temp\, I quit!
- C:\Users\user\AppData\Local\Temp\ I quit!
- C:\Users\user\AppData\Local\Temp\I quit!
- C:\Users\user\AppData\Local\Temp\ quit!
- C:\Users\user\AppData\Local\Temp\quit!
- C:\Users\user\AppData\Local\Temp\uit!
- C:\Users\user\AppData\Local\Temp\it!
- C:\Users\user\AppData\Local\Temp\t!
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x8e\x92\xc4\xa6
- C:\Users\user\AppData\Local\Temp\Whoever read this is gay!
- C:\Users\user\AppData\Local\Temp\hoever read this is gay!
- C:\Users\user\AppData\Local\Temp\oever read this is gay!
- C:\Users\user\AppData\Local\Temp\ever read this is gay!
- C:\Users\user\AppData\Local\Temp\ver read this is gay!
- C:\Users\user\AppData\Local\Temp\er read this is gay!
- C:\Users\user\AppData\Local\Temp\r read this is gay!
- C:\Users\user\AppData\Local\Temp\ read this is gay!
- C:\Users\user\AppData\Local\Temp\read this is gay!
- C:\Users\user\AppData\Local\Temp\ead this is gay!
- C:\Users\user\AppData\Local\Temp\ad this is gay!
- C:\Users\user\AppData\Local\Temp\d this is gay!
- C:\Users\user\AppData\Local\Temp\ this is gay!
- C:\Users\user\AppData\Local\Temp\this is gay!
- C:\Users\user\AppData\Local\Temp\his is gay!
- C:\Users\user\AppData\Local\Temp\is is gay!
- C:\Users\user\AppData\Local\Temp\s is gay!
- C:\Users\user\AppData\Local\Temp\ is gay!
- C:\Users\user\AppData\Local\Temp\is gay!
- C:\Users\user\AppData\Local\Temp\s gay!
- C:\Users\user\AppData\Local\Temp\ gay!
- C:\Users\user\AppData\Local\Temp\gay!
- C:\Users\user\AppData\Local\Temp\ay!
- C:\Users\user\AppData\Local\Temp\y!
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x8f\x86\xc4\xa6
- C:\Users\user\AppData\Local\Temp\Hold on tight, buddy!
- C:\Users\user\AppData\Local\Temp\old on tight, buddy!
- C:\Users\user\AppData\Local\Temp\ld on tight, buddy!
- C:\Users\user\AppData\Local\Temp\d on tight, buddy!
- C:\Users\user\AppData\Local\Temp\ on tight, buddy!
- C:\Users\user\AppData\Local\Temp\on tight, buddy!
- C:\Users\user\AppData\Local\Temp\n tight, buddy!
- C:\Users\user\AppData\Local\Temp\ tight, buddy!
- C:\Users\user\AppData\Local\Temp\tight, buddy!
- C:\Users\user\AppData\Local\Temp\ight, buddy!
- C:\Users\user\AppData\Local\Temp\ght, buddy!
- C:\Users\user\AppData\Local\Temp\ht, buddy!
- C:\Users\user\AppData\Local\Temp\t, buddy!
- C:\Users\user\AppData\Local\Temp\, buddy!
- C:\Users\user\AppData\Local\Temp\ buddy!
- C:\Users\user\AppData\Local\Temp\buddy!
- C:\Users\user\AppData\Local\Temp\uddy!
- C:\Users\user\AppData\Local\Temp\ddy!
- C:\Users\user\AppData\Local\Temp\dy!
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x8f\xb2\xc4\xa6
- C:\Users\user\AppData\Local\Temp\THE END IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\HE END IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\E END IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\ END IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\END IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\ND IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\D IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\ IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\S NEAR!!!
- C:\Users\user\AppData\Local\Temp\ NEAR!!!
- C:\Users\user\AppData\Local\Temp\NEAR!!!
- C:\Users\user\AppData\Local\Temp\EAR!!!
- C:\Users\user\AppData\Local\Temp\AR!!!
- C:\Users\user\AppData\Local\Temp\R!!!
- C:\Users\user\AppData\Local\Temp\!!!
- C:\Users\user\AppData\Local\Temp\!!
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x90\x98\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x90\x9a\xc4\xa6
- C:\Users\user\AppData\Local\Temp\Veni, Vidi, Vici!
- C:\Users\user\AppData\Local\Temp\eni, Vidi, Vici!
- C:\Users\user\AppData\Local\Temp\ni, Vidi, Vici!
- C:\Users\user\AppData\Local\Temp\i, Vidi, Vici!
- C:\Users\user\AppData\Local\Temp\, Vidi, Vici!
- C:\Users\user\AppData\Local\Temp\ Vidi, Vici!
- C:\Users\user\AppData\Local\Temp\Vidi, Vici!
- C:\Users\user\AppData\Local\Temp\idi, Vici!
- C:\Users\user\AppData\Local\Temp\di, Vici!
- C:\Users\user\AppData\Local\Temp\i, Vici!
- C:\Users\user\AppData\Local\Temp\, Vici!
- C:\Users\user\AppData\Local\Temp\ Vici!
- C:\Users\user\AppData\Local\Temp\Vici!
- C:\Users\user\AppData\Local\Temp\ici!
- C:\Users\user\AppData\Local\Temp\ci!
- C:\Users\user\AppData\Local\Temp\i!
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x90\xbe\xc4\xa6
- C:\Users\user\AppData\Local\Temp\DEAD END
- C:\Users\user\AppData\Local\Temp\EAD END
- C:\Users\user\AppData\Local\Temp\AD END
- C:\Users\user\AppData\Local\Temp\D END
- C:\Users\user\AppData\Local\Temp\ END
- C:\Users\user\AppData\Local\Temp\END
- C:\Users\user\AppData\Local\Temp\ND
- C:\Users\user\AppData\Local\Temp\D
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x91\x92\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x91\x94\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x91\x96\xc4\xa6
- C:\Users\user\AppData\Local\Temp\https:\www.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\ttps:\www.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\tps:\www.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\ps:\www.youtube.com\@JhoPro
- S:\www.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\:\www.youtube.com\@JhoPro
- //www.youtube.com/@JhoPro
- C:\www.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\www.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\ww.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\w.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\outube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\utube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\tube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\ube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\be.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\e.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\com\@JhoPro
- C:\Users\user\AppData\Local\Temp\om\@JhoPro
- C:\Users\user\AppData\Local\Temp\m\@JhoPro
- C:\@JhoPro
- C:\Users\user\AppData\Local\Temp\@JhoPro
- C:\Users\user\AppData\Local\Temp\JhoPro
- C:\Users\user\AppData\Local\Temp\hoPro
- C:\Users\user\AppData\Local\Temp\oPro
- C:\Users\user\AppData\Local\Temp\Pro
- C:\Users\user\AppData\Local\Temp\ro
- C:\Users\user\AppData\Local\Temp\o
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x92\x96\xc4\xa6
- C:\Users\user\AppData\Local\Temp\Start Page
- C:\Users\user\AppData\Local\Temp\tart Page
- C:\Users\user\AppData\Local\Temp\art Page
- C:\Users\user\AppData\Local\Temp\rt Page
- C:\Users\user\AppData\Local\Temp\t Page
- C:\Users\user\AppData\Local\Temp\ Page
- C:\Users\user\AppData\Local\Temp\Page
- C:\Users\user\AppData\Local\Temp\age
- C:\Users\user\AppData\Local\Temp\ge
- C:\Users\user\AppData\Local\Temp\e
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x92\xac\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x92\xae\xc4\xa6
- C:\Users\user\AppData\Local\Temp\Software\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\oftware\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\ftware\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\tware\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\ware\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\are\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\re\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\e\Microsoft\Internet Explorer\Main
- C:\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\icrosoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\crosoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\rosoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\osoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\soft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\oft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\ft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\t\Internet Explorer\Main
- C:\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\nternet Explorer\Main
- C:\Users\user\AppData\Local\Temp\ternet Explorer\Main
- C:\Users\user\AppData\Local\Temp\ernet Explorer\Main
- C:\Users\user\AppData\Local\Temp\rnet Explorer\Main
- C:\Users\user\AppData\Local\Temp\net Explorer\Main
- C:\Users\user\AppData\Local\Temp\et Explorer\Main
- C:\Users\user\AppData\Local\Temp\t Explorer\Main
- C:\Users\user\AppData\Local\Temp\ Explorer\Main
- C:\Users\user\AppData\Local\Temp\Explorer\Main
- C:\Users\user\AppData\Local\Temp\xplorer\Main
- C:\Users\user\AppData\Local\Temp\plorer\Main
- C:\Users\user\AppData\Local\Temp\lorer\Main
- C:\Users\user\AppData\Local\Temp\orer\Main
- C:\Users\user\AppData\Local\Temp\rer\Main
- C:\Users\user\AppData\Local\Temp\er\Main
- C:\Users\user\AppData\Local\Temp\r\Main
- C:\Main
- C:\Users\user\AppData\Local\Temp\Main
- C:\Users\user\AppData\Local\Temp\ain
- C:\Users\user\AppData\Local\Temp\in
- C:\Users\user\AppData\Local\Temp\n
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x94\x82\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x94\x84\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x94\x86\xc4\xa6
- C:\Users\user\AppData\Local\Temp\:\Windows\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\Windows\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\indows\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\ndows\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\dows\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\ows\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\ws\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\s\System32\Scanner.exe
- C:\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\ystem32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\stem32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\tem32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\em32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\m32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\2\Scanner.exe
- C:\Scanner.exe
- C:\Users\user\AppData\Local\Temp\Scanner.exe
- C:\Users\user\AppData\Local\Temp\canner.exe
- C:\Users\user\AppData\Local\Temp\anner.exe
- C:\Users\user\AppData\Local\Temp\nner.exe
- C:\Users\user\AppData\Local\Temp\ner.exe
- C:\Users\user\AppData\Local\Temp\er.exe
- C:\Users\user\AppData\Local\Temp\r.exe
- C:\Users\user\AppData\Local\Temp\.exe
- C:\Users\user\AppData\Local\Temp\exe
- C:\Users\user\AppData\Local\Temp\xe
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x95\x86\xc4\xa6
- C:\Users\user\AppData\Local\Temp\:\Windows\calc.exe
- C:\Users\user\AppData\Local\Temp\Windows\calc.exe
- C:\Users\user\AppData\Local\Temp\indows\calc.exe
- C:\Users\user\AppData\Local\Temp\ndows\calc.exe
- C:\Users\user\AppData\Local\Temp\dows\calc.exe
- C:\Users\user\AppData\Local\Temp\ows\calc.exe
- C:\Users\user\AppData\Local\Temp\ws\calc.exe
- C:\Users\user\AppData\Local\Temp\s\calc.exe
- C:\calc.exe
- C:\Users\user\AppData\Local\Temp\calc.exe
- C:\Users\user\AppData\Local\Temp\alc.exe
- C:\Users\user\AppData\Local\Temp\lc.exe
- C:\Users\user\AppData\Local\Temp\c.exe
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x95\xae\xc4\xa6
- C:\Users\user\AppData\Local\Temp\:\Windows\WinNet.exe
- C:\Users\user\AppData\Local\Temp\Windows\WinNet.exe
- C:\Users\user\AppData\Local\Temp\indows\WinNet.exe
- C:\Users\user\AppData\Local\Temp\ndows\WinNet.exe
- C:\Users\user\AppData\Local\Temp\dows\WinNet.exe
- C:\Users\user\AppData\Local\Temp\ows\WinNet.exe
- C:\Users\user\AppData\Local\Temp\ws\WinNet.exe
- C:\Users\user\AppData\Local\Temp\s\WinNet.exe
- C:\WinNet.exe
- C:\Users\user\AppData\Local\Temp\WinNet.exe
- C:\Users\user\AppData\Local\Temp\inNet.exe
- C:\Users\user\AppData\Local\Temp\nNet.exe
- C:\Users\user\AppData\Local\Temp\Net.exe
- C:\Users\user\AppData\Local\Temp\et.exe
- C:\Users\user\AppData\Local\Temp\t.exe
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x96\x9a\xc4\xa6
- C:\Users\user\AppData\Local\Temp\WinNet
- C:\Users\user\AppData\Local\Temp\inNet
- C:\Users\user\AppData\Local\Temp\nNet
- C:\Users\user\AppData\Local\Temp\Net
- C:\Users\user\AppData\Local\Temp\et
- C:\Users\user\AppData\Local\Temp\t
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x96\xa8\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x96\xaa\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x96\xac\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x96\xae\xc4\xa6
- C:\Users\user\AppData\Local\Temp\Software\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\oftware\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\ftware\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\tware\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\ware\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\are\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\re\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\e\Microsoft\Windows\CurrentVersion\Run
- C:\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\icrosoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\crosoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\rosoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\osoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\soft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\oft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\ft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\t\Windows\CurrentVersion\Run
- C:\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\indows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\ndows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\dows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\ows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\ws\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\s\CurrentVersion\Run
- C:\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\urrentVersion\Run
- C:\Users\user\AppData\Local\Temp\rrentVersion\Run
- C:\Users\user\AppData\Local\Temp\rentVersion\Run
- C:\Users\user\AppData\Local\Temp\entVersion\Run
- C:\Users\user\AppData\Local\Temp\ntVersion\Run
- C:\Users\user\AppData\Local\Temp\tVersion\Run
- C:\Users\user\AppData\Local\Temp\Version\Run
- C:\Users\user\AppData\Local\Temp\ersion\Run
- C:\Users\user\AppData\Local\Temp\rsion\Run
- C:\Users\user\AppData\Local\Temp\sion\Run
- C:\Users\user\AppData\Local\Temp\ion\Run
- C:\Users\user\AppData\Local\Temp\on\Run
- C:\Users\user\AppData\Local\Temp\n\Run
- C:\Run
- C:\Users\user\AppData\Local\Temp\Run
- C:\Users\user\AppData\Local\Temp\un
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x98\x8a\xc4\xa6
- C:\Users\user\AppData\Local\Temp\Lixo.exe - Information
- C:\Users\user\AppData\Local\Temp\ixo.exe - Information
- C:\Users\user\AppData\Local\Temp\xo.exe - Information
- C:\Users\user\AppData\Local\Temp\o.exe - Information
- C:\Users\user\AppData\Local\Temp\.exe - Information
- C:\Users\user\AppData\Local\Temp\exe - Information
- C:\Users\user\AppData\Local\Temp\xe - Information
- C:\Users\user\AppData\Local\Temp\e - Information
- C:\Users\user\AppData\Local\Temp\ - Information
- C:\Users\user\AppData\Local\Temp\- Information
- C:\Users\user\AppData\Local\Temp\ Information
- C:\Users\user\AppData\Local\Temp\Information
- C:\Users\user\AppData\Local\Temp\nformation
- C:\Users\user\AppData\Local\Temp\formation
- C:\Users\user\AppData\Local\Temp\ormation
- C:\Users\user\AppData\Local\Temp\rmation
- C:\Users\user\AppData\Local\Temp\mation
- C:\Users\user\AppData\Local\Temp\ation
- C:\Users\user\AppData\Local\Temp\tion
- C:\Users\user\AppData\Local\Temp\ion
- C:\Users\user\AppData\Local\Temp\on
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x98\xb8\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x98\xba\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x98\xbc\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x98\xbe\xc4\xa6
- C:\Users\user\AppData\Local\Temp\Today is a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\oday is a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\day is a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\ay is a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\y is a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\ is a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\is a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\s a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\ a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\ special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\pecial day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\ecial day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\cial day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\ial day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\wdmaud.drv
- C:\Windows\System32\wdmaud.drv
- C:\Windows\System32\en-US\wdmaud.drv.mui
- C:\Windows\System32\en-US\MMDevAPI.DLL.mui
Show More 543

Read Registry Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\CTF\EnableAnchorContext
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave1
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave2
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave3
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave4
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave5
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave6
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave7
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave8
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave9
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi1
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi2
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi3
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi4
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi5
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi6
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi7
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi8
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi9
- HKEY_CURRENT_USER\System\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\Winmm\wheel
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wdmaud.drv
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SESSION MANAGER\SafeProcessSearchMode
- HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{455ff7ad-7149-49e1-9900-d5acc7fb67ed}\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{455ff7ad-7149-49e1-9900-d5acc7fb67ed}\Properties\{026e516e-b814-414b-83cd-856d6fef4822},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{455ff7ad-7149-49e1-9900-d5acc7fb67ed}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{455ff7ad-7149-49e1-9900-d5acc7fb67ed}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},6
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{455ff7ad-7149-49e1-9900-d5acc7fb67ed}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{455ff7ad-7149-49e1-9900-d5acc7fb67ed}\Properties\{1da5d803-d492-4edd-8c23-e0c0ffee7f0e},0
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{d39cf7fb-6b16-44c3-a019-e218374ed1f1}\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{d39cf7fb-6b16-44c3-a019-e218374ed1f1}\Properties\{026e516e-b814-414b-83cd-856d6fef4822},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{d39cf7fb-6b16-44c3-a019-e218374ed1f1}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{d39cf7fb-6b16-44c3-a019-e218374ed1f1}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},6
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{d39cf7fb-6b16-44c3-a019-e218374ed1f1}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{d39cf7fb-6b16-44c3-a019-e218374ed1f1}\Properties\{1da5d803-d492-4edd-8c23-e0c0ffee7f0e},0
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Capture\{8afafb6a-f1b0-4935-be8a-5894d19191bd}\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Capture\{8afafb6a-f1b0-4935-be8a-5894d19191bd}\Properties\{026e516e-b814-414b-83cd-856d6fef4822},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Capture\{8afafb6a-f1b0-4935-be8a-5894d19191bd}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Capture\{8afafb6a-f1b0-4935-be8a-5894d19191bd}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},6
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Capture\{8afafb6a-f1b0-4935-be8a-5894d19191bd}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Capture\{8afafb6a-f1b0-4935-be8a-5894d19191bd}\Properties\{1da5d803-d492-4edd-8c23-e0c0ffee7f0e},0
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wavemapper
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midimapper
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{455ff7ad-7149-49e1-9900-d5acc7fb67ed}\DeviceState
- HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Audio\UserDuckingPreference
Show More 67

Modified Files

C:\Windows\System32\Scanner.exe
C:\Windows\calc.exe
\??\PhysicalDrive0
C:\Users\user\AppData\Local\Temp\This is just the beginning my friend!
C:\Users\user\AppData\Local\Temp\his is just the beginning my friend!
- C:\Users\user\AppData\Local\Temp\is is just the beginning my friend!
- C:\Users\user\AppData\Local\Temp\s is just the beginning my friend!
- C:\Users\user\AppData\Local\Temp\ is just the beginning my friend!
- C:\Users\user\AppData\Local\Temp\is just the beginning my friend!
- C:\Users\user\AppData\Local\Temp\s just the beginning my friend!
- C:\Users\user\AppData\Local\Temp\ just the beginning my friend!
- C:\Users\user\AppData\Local\Temp\just the beginning my friend!
- C:\Users\user\AppData\Local\Temp\ust the beginning my friend!
- C:\Users\user\AppData\Local\Temp\st the beginning my friend!
- C:\Users\user\AppData\Local\Temp\t the beginning my friend!
- C:\Users\user\AppData\Local\Temp\ the beginning my friend!
- C:\Users\user\AppData\Local\Temp\the beginning my friend!
- C:\Users\user\AppData\Local\Temp\he beginning my friend!
- C:\Users\user\AppData\Local\Temp\e beginning my friend!
- C:\Users\user\AppData\Local\Temp\ beginning my friend!
- C:\Users\user\AppData\Local\Temp\beginning my friend!
- C:\Users\user\AppData\Local\Temp\eginning my friend!
- C:\Users\user\AppData\Local\Temp\ginning my friend!
- C:\Users\user\AppData\Local\Temp\inning my friend!
- C:\Users\user\AppData\Local\Temp\nning my friend!
- C:\Users\user\AppData\Local\Temp\ning my friend!
- C:\Users\user\AppData\Local\Temp\ing my friend!
- C:\Users\user\AppData\Local\Temp\ng my friend!
- C:\Users\user\AppData\Local\Temp\g my friend!
- C:\Users\user\AppData\Local\Temp\ my friend!
- C:\Users\user\AppData\Local\Temp\my friend!
- C:\Users\user\AppData\Local\Temp\y friend!
- C:\Users\user\AppData\Local\Temp\ friend!
- C:\Users\user\AppData\Local\Temp\friend!
- C:\Users\user\AppData\Local\Temp\riend!
- C:\Users\user\AppData\Local\Temp\iend!
- C:\Users\user\AppData\Local\Temp\end!
- C:\Users\user\AppData\Local\Temp\nd!
- C:\Users\user\AppData\Local\Temp\d!
- C:\Users\user\AppData\Local\Temp\!
- C:\Users\user\AppData\Local\Temp\Lixo.exe - ur fucked up
- C:\Users\user\AppData\Local\Temp\ixo.exe - ur fucked up
- C:\Users\user\AppData\Local\Temp\xo.exe - ur fucked up
- C:\Users\user\AppData\Local\Temp\o.exe - ur fucked up
- C:\Users\user\AppData\Local\Temp\.exe - ur fucked up
- C:\Users\user\AppData\Local\Temp\exe - ur fucked up
- C:\Users\user\AppData\Local\Temp\xe - ur fucked up
- C:\Users\user\AppData\Local\Temp\e - ur fucked up
- C:\Users\user\AppData\Local\Temp\ - ur fucked up
- C:\Users\user\AppData\Local\Temp\- ur fucked up
- C:\Users\user\AppData\Local\Temp\ ur fucked up
- C:\Users\user\AppData\Local\Temp\ur fucked up
- C:\Users\user\AppData\Local\Temp\r fucked up
- C:\Users\user\AppData\Local\Temp\ fucked up
- C:\Users\user\AppData\Local\Temp\fucked up
- C:\Users\user\AppData\Local\Temp\ucked up
- C:\Users\user\AppData\Local\Temp\cked up
- C:\Users\user\AppData\Local\Temp\ked up
- C:\Users\user\AppData\Local\Temp\ed up
- C:\Users\user\AppData\Local\Temp\d up
- C:\Users\user\AppData\Local\Temp\ up
- C:\Users\user\AppData\Local\Temp\up
- C:\Users\user\AppData\Local\Temp\p
- C:\Users\user\AppData\Local\Temp
- C:\Users\user\AppData\Local\Temp\Pneumonoultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\neumonoultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\eumonoultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\umonoultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\monoultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\onoultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\noultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\oultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\ultramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\ltramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\tramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\ramicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\amicroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\microscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\icroscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\croscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\roscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\oscopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\scopicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\copicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\opicosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\picosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\icosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\cosilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\osilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\silicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\ilicovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\licovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\icovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\covolcanoconiosis
- C:\Users\user\AppData\Local\Temp\ovolcanoconiosis
- C:\Users\user\AppData\Local\Temp\volcanoconiosis
- C:\Users\user\AppData\Local\Temp\olcanoconiosis
- C:\Users\user\AppData\Local\Temp\lcanoconiosis
- C:\Users\user\AppData\Local\Temp\canoconiosis
- C:\Users\user\AppData\Local\Temp\anoconiosis
- C:\Users\user\AppData\Local\Temp\noconiosis
- C:\Users\user\AppData\Local\Temp\oconiosis
- C:\Users\user\AppData\Local\Temp\coniosis
- C:\Users\user\AppData\Local\Temp\oniosis
- C:\Users\user\AppData\Local\Temp\niosis
- C:\Users\user\AppData\Local\Temp\iosis
- C:\Users\user\AppData\Local\Temp\osis
- C:\Users\user\AppData\Local\Temp\sis
- C:\Users\user\AppData\Local\Temp\is
- C:\Users\user\AppData\Local\Temp\s
- C:\Users\user\AppData\Local\Temp\All I do is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\ll I do is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\l I do is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\ I do is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\I do is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\ do is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\do is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\o is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\ is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\is work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\s work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\ work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\work, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\ork, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\rk, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\k, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\, work, work, I quit!
- C:\Users\user\AppData\Local\Temp\ work, work, I quit!
- C:\Users\user\AppData\Local\Temp\work, work, I quit!
- C:\Users\user\AppData\Local\Temp\ork, work, I quit!
- C:\Users\user\AppData\Local\Temp\rk, work, I quit!
- C:\Users\user\AppData\Local\Temp\k, work, I quit!
- C:\Users\user\AppData\Local\Temp\, work, I quit!
- C:\Users\user\AppData\Local\Temp\ work, I quit!
- C:\Users\user\AppData\Local\Temp\work, I quit!
- C:\Users\user\AppData\Local\Temp\ork, I quit!
- C:\Users\user\AppData\Local\Temp\rk, I quit!
- C:\Users\user\AppData\Local\Temp\k, I quit!
- C:\Users\user\AppData\Local\Temp\, I quit!
- C:\Users\user\AppData\Local\Temp\ I quit!
- C:\Users\user\AppData\Local\Temp\I quit!
- C:\Users\user\AppData\Local\Temp\ quit!
- C:\Users\user\AppData\Local\Temp\quit!
- C:\Users\user\AppData\Local\Temp\uit!
- C:\Users\user\AppData\Local\Temp\it!
- C:\Users\user\AppData\Local\Temp\t!
- C:\Users\user\AppData\Local\Temp\Whoever read this is gay!
- C:\Users\user\AppData\Local\Temp\hoever read this is gay!
- C:\Users\user\AppData\Local\Temp\oever read this is gay!
- C:\Users\user\AppData\Local\Temp\ever read this is gay!
- C:\Users\user\AppData\Local\Temp\ver read this is gay!
- C:\Users\user\AppData\Local\Temp\er read this is gay!
- C:\Users\user\AppData\Local\Temp\r read this is gay!
- C:\Users\user\AppData\Local\Temp\ read this is gay!
- C:\Users\user\AppData\Local\Temp\read this is gay!
- C:\Users\user\AppData\Local\Temp\ead this is gay!
- C:\Users\user\AppData\Local\Temp\ad this is gay!
- C:\Users\user\AppData\Local\Temp\d this is gay!
- C:\Users\user\AppData\Local\Temp\ this is gay!
- C:\Users\user\AppData\Local\Temp\this is gay!
- C:\Users\user\AppData\Local\Temp\his is gay!
- C:\Users\user\AppData\Local\Temp\is is gay!
- C:\Users\user\AppData\Local\Temp\s is gay!
- C:\Users\user\AppData\Local\Temp\ is gay!
- C:\Users\user\AppData\Local\Temp\is gay!
- C:\Users\user\AppData\Local\Temp\s gay!
- C:\Users\user\AppData\Local\Temp\ gay!
- C:\Users\user\AppData\Local\Temp\gay!
- C:\Users\user\AppData\Local\Temp\ay!
- C:\Users\user\AppData\Local\Temp\y!
- C:\Users\user\AppData\Local\Temp\Hold on tight, buddy!
- C:\Users\user\AppData\Local\Temp\old on tight, buddy!
- C:\Users\user\AppData\Local\Temp\ld on tight, buddy!
- C:\Users\user\AppData\Local\Temp\d on tight, buddy!
- C:\Users\user\AppData\Local\Temp\ on tight, buddy!
- C:\Users\user\AppData\Local\Temp\on tight, buddy!
- C:\Users\user\AppData\Local\Temp\n tight, buddy!
- C:\Users\user\AppData\Local\Temp\ tight, buddy!
- C:\Users\user\AppData\Local\Temp\tight, buddy!
- C:\Users\user\AppData\Local\Temp\ight, buddy!
- C:\Users\user\AppData\Local\Temp\ght, buddy!
- C:\Users\user\AppData\Local\Temp\ht, buddy!
- C:\Users\user\AppData\Local\Temp\t, buddy!
- C:\Users\user\AppData\Local\Temp\, buddy!
- C:\Users\user\AppData\Local\Temp\ buddy!
- C:\Users\user\AppData\Local\Temp\buddy!
- C:\Users\user\AppData\Local\Temp\uddy!
- C:\Users\user\AppData\Local\Temp\ddy!
- C:\Users\user\AppData\Local\Temp\dy!
- C:\Users\user\AppData\Local\Temp\THE END IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\HE END IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\E END IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\ END IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\END IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\ND IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\D IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\ IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\IS NEAR!!!
- C:\Users\user\AppData\Local\Temp\S NEAR!!!
- C:\Users\user\AppData\Local\Temp\ NEAR!!!
- C:\Users\user\AppData\Local\Temp\NEAR!!!
- C:\Users\user\AppData\Local\Temp\EAR!!!
- C:\Users\user\AppData\Local\Temp\AR!!!
- C:\Users\user\AppData\Local\Temp\R!!!
- C:\Users\user\AppData\Local\Temp\!!!
- C:\Users\user\AppData\Local\Temp\!!
- C:\Users\user\AppData\Local\Temp\Veni, Vidi, Vici!
- C:\Users\user\AppData\Local\Temp\eni, Vidi, Vici!
- C:\Users\user\AppData\Local\Temp\ni, Vidi, Vici!
- C:\Users\user\AppData\Local\Temp\i, Vidi, Vici!
- C:\Users\user\AppData\Local\Temp\, Vidi, Vici!
- C:\Users\user\AppData\Local\Temp\ Vidi, Vici!
- C:\Users\user\AppData\Local\Temp\Vidi, Vici!
- C:\Users\user\AppData\Local\Temp\idi, Vici!
- C:\Users\user\AppData\Local\Temp\di, Vici!
- C:\Users\user\AppData\Local\Temp\i, Vici!
- C:\Users\user\AppData\Local\Temp\, Vici!
- C:\Users\user\AppData\Local\Temp\ Vici!
- C:\Users\user\AppData\Local\Temp\Vici!
- C:\Users\user\AppData\Local\Temp\ici!
- C:\Users\user\AppData\Local\Temp\ci!
- C:\Users\user\AppData\Local\Temp\i!
- C:\Users\user\AppData\Local\Temp\DEAD END
- C:\Users\user\AppData\Local\Temp\EAD END
- C:\Users\user\AppData\Local\Temp\AD END
- C:\Users\user\AppData\Local\Temp\D END
- C:\Users\user\AppData\Local\Temp\ END
- C:\Users\user\AppData\Local\Temp\END
- C:\Users\user\AppData\Local\Temp\ND
- C:\Users\user\AppData\Local\Temp\D
- C:\Users\user\AppData\Local\Temp\https:\www.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\ttps:\www.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\tps:\www.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\ps:\www.youtube.com\@JhoPro
- S:\www.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\:\www.youtube.com\@JhoPro
- //www.youtube.com/@JhoPro
- C:\www.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\www.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\ww.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\w.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\.youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\youtube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\outube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\utube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\tube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\ube.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\be.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\e.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\.com\@JhoPro
- C:\Users\user\AppData\Local\Temp\com\@JhoPro
- C:\Users\user\AppData\Local\Temp\om\@JhoPro
- C:\Users\user\AppData\Local\Temp\m\@JhoPro
- C:\@JhoPro
- C:\Users\user\AppData\Local\Temp\@JhoPro
- C:\Users\user\AppData\Local\Temp\JhoPro
- C:\Users\user\AppData\Local\Temp\hoPro
- C:\Users\user\AppData\Local\Temp\oPro
- C:\Users\user\AppData\Local\Temp\Pro
- C:\Users\user\AppData\Local\Temp\ro
- C:\Users\user\AppData\Local\Temp\o
- C:\Users\user\AppData\Local\Temp\Start Page
- C:\Users\user\AppData\Local\Temp\tart Page
- C:\Users\user\AppData\Local\Temp\art Page
- C:\Users\user\AppData\Local\Temp\rt Page
- C:\Users\user\AppData\Local\Temp\t Page
- C:\Users\user\AppData\Local\Temp\ Page
- C:\Users\user\AppData\Local\Temp\Page
- C:\Users\user\AppData\Local\Temp\age
- C:\Users\user\AppData\Local\Temp\ge
- C:\Users\user\AppData\Local\Temp\e
- C:\Users\user\AppData\Local\Temp\Software\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\oftware\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\ftware\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\tware\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\ware\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\are\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\re\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\e\Microsoft\Internet Explorer\Main
- C:\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\Microsoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\icrosoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\crosoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\rosoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\osoft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\soft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\oft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\ft\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\t\Internet Explorer\Main
- C:\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\Internet Explorer\Main
- C:\Users\user\AppData\Local\Temp\nternet Explorer\Main
- C:\Users\user\AppData\Local\Temp\ternet Explorer\Main
- C:\Users\user\AppData\Local\Temp\ernet Explorer\Main
- C:\Users\user\AppData\Local\Temp\rnet Explorer\Main
- C:\Users\user\AppData\Local\Temp\net Explorer\Main
- C:\Users\user\AppData\Local\Temp\et Explorer\Main
- C:\Users\user\AppData\Local\Temp\t Explorer\Main
- C:\Users\user\AppData\Local\Temp\ Explorer\Main
- C:\Users\user\AppData\Local\Temp\Explorer\Main
- C:\Users\user\AppData\Local\Temp\xplorer\Main
- C:\Users\user\AppData\Local\Temp\plorer\Main
- C:\Users\user\AppData\Local\Temp\lorer\Main
- C:\Users\user\AppData\Local\Temp\orer\Main
- C:\Users\user\AppData\Local\Temp\rer\Main
- C:\Users\user\AppData\Local\Temp\er\Main
- C:\Users\user\AppData\Local\Temp\r\Main
- C:\Main
- C:\Users\user\AppData\Local\Temp\Main
- C:\Users\user\AppData\Local\Temp\ain
- C:\Users\user\AppData\Local\Temp\in
- C:\Users\user\AppData\Local\Temp\n
- C:\Users\user\AppData\Local\Temp\:\Windows\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\Windows\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\indows\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\ndows\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\dows\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\ows\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\ws\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\s\System32\Scanner.exe
- C:\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\System32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\ystem32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\stem32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\tem32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\em32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\m32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\32\Scanner.exe
- C:\Users\user\AppData\Local\Temp\2\Scanner.exe
- C:\Scanner.exe
- C:\Users\user\AppData\Local\Temp\Scanner.exe
- C:\Users\user\AppData\Local\Temp\canner.exe
- C:\Users\user\AppData\Local\Temp\anner.exe
- C:\Users\user\AppData\Local\Temp\nner.exe
- C:\Users\user\AppData\Local\Temp\ner.exe
- C:\Users\user\AppData\Local\Temp\er.exe
- C:\Users\user\AppData\Local\Temp\r.exe
- C:\Users\user\AppData\Local\Temp\.exe
- C:\Users\user\AppData\Local\Temp\exe
- C:\Users\user\AppData\Local\Temp\xe
- C:\Users\user\AppData\Local\Temp\:\Windows\calc.exe
- C:\Users\user\AppData\Local\Temp\Windows\calc.exe
- C:\Users\user\AppData\Local\Temp\indows\calc.exe
- C:\Users\user\AppData\Local\Temp\ndows\calc.exe
- C:\Users\user\AppData\Local\Temp\dows\calc.exe
- C:\Users\user\AppData\Local\Temp\ows\calc.exe
- C:\Users\user\AppData\Local\Temp\ws\calc.exe
- C:\Users\user\AppData\Local\Temp\s\calc.exe
- C:\calc.exe
- C:\Users\user\AppData\Local\Temp\calc.exe
- C:\Users\user\AppData\Local\Temp\alc.exe
- C:\Users\user\AppData\Local\Temp\lc.exe
- C:\Users\user\AppData\Local\Temp\c.exe
- C:\Windows\WinNet.exe
- C:\Users\user\AppData\Local\Temp\:\Windows\WinNet.exe
- C:\Users\user\AppData\Local\Temp\Windows\WinNet.exe
- C:\Users\user\AppData\Local\Temp\indows\WinNet.exe
- C:\Users\user\AppData\Local\Temp\ndows\WinNet.exe
- C:\Users\user\AppData\Local\Temp\dows\WinNet.exe
- C:\Users\user\AppData\Local\Temp\ows\WinNet.exe
- C:\Users\user\AppData\Local\Temp\ws\WinNet.exe
- C:\Users\user\AppData\Local\Temp\s\WinNet.exe
- C:\WinNet.exe
- C:\Users\user\AppData\Local\Temp\WinNet.exe
- C:\Users\user\AppData\Local\Temp\inNet.exe
- C:\Users\user\AppData\Local\Temp\nNet.exe
- C:\Users\user\AppData\Local\Temp\Net.exe
- C:\Users\user\AppData\Local\Temp\et.exe
- C:\Users\user\AppData\Local\Temp\t.exe
- C:\Users\user\AppData\Local\Temp\WinNet
- C:\Users\user\AppData\Local\Temp\inNet
- C:\Users\user\AppData\Local\Temp\nNet
- C:\Users\user\AppData\Local\Temp\Net
- C:\Users\user\AppData\Local\Temp\et
- C:\Users\user\AppData\Local\Temp\t
- C:\Users\user\AppData\Local\Temp\Software\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\oftware\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\ftware\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\tware\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\ware\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\are\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\re\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\e\Microsoft\Windows\CurrentVersion\Run
- C:\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\Microsoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\icrosoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\crosoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\rosoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\osoft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\soft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\oft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\ft\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\t\Windows\CurrentVersion\Run
- C:\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\Windows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\indows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\ndows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\dows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\ows\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\ws\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\s\CurrentVersion\Run
- C:\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\CurrentVersion\Run
- C:\Users\user\AppData\Local\Temp\urrentVersion\Run
- C:\Users\user\AppData\Local\Temp\rrentVersion\Run
- C:\Users\user\AppData\Local\Temp\rentVersion\Run
- C:\Users\user\AppData\Local\Temp\entVersion\Run
- C:\Users\user\AppData\Local\Temp\ntVersion\Run
- C:\Users\user\AppData\Local\Temp\tVersion\Run
- C:\Users\user\AppData\Local\Temp\Version\Run
- C:\Users\user\AppData\Local\Temp\ersion\Run
- C:\Users\user\AppData\Local\Temp\rsion\Run
- C:\Users\user\AppData\Local\Temp\sion\Run
- C:\Users\user\AppData\Local\Temp\ion\Run
- C:\Users\user\AppData\Local\Temp\on\Run
- C:\Users\user\AppData\Local\Temp\n\Run
- C:\Run
- C:\Users\user\AppData\Local\Temp\Run
- C:\Users\user\AppData\Local\Temp\un
- C:\Users\user\AppData\Local\Temp\Lixo.exe - Information
- C:\Users\user\AppData\Local\Temp\ixo.exe - Information
- C:\Users\user\AppData\Local\Temp\xo.exe - Information
- C:\Users\user\AppData\Local\Temp\o.exe - Information
- C:\Users\user\AppData\Local\Temp\.exe - Information
- C:\Users\user\AppData\Local\Temp\exe - Information
- C:\Users\user\AppData\Local\Temp\xe - Information
- C:\Users\user\AppData\Local\Temp\e - Information
- C:\Users\user\AppData\Local\Temp\ - Information
- C:\Users\user\AppData\Local\Temp\- Information
- C:\Users\user\AppData\Local\Temp\ Information
- C:\Users\user\AppData\Local\Temp\Information
- C:\Users\user\AppData\Local\Temp\nformation
- C:\Users\user\AppData\Local\Temp\formation
- C:\Users\user\AppData\Local\Temp\ormation
- C:\Users\user\AppData\Local\Temp\rmation
- C:\Users\user\AppData\Local\Temp\mation
- C:\Users\user\AppData\Local\Temp\ation
- C:\Users\user\AppData\Local\Temp\tion
- C:\Users\user\AppData\Local\Temp\ion
- C:\Users\user\AppData\Local\Temp\on
- C:\Users\user\AppData\Local\Temp\Today is a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\oday is a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\day is a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\ay is a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\y is a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\ is a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\is a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\s a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\ a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\a special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\ special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\special day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\pecial day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\ecial day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\cial day, so I'm sparing you! See you later
- C:\Users\user\AppData\Local\Temp\ial day, so I'm sparing you! See you later
Show More 451

Resolved APIs

kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.FlsAlloc
kernel32.dll.FlsSetValue
kernel32.dll.FlsGetValue
kernel32.dll.LCMapStringEx
- gdi32.dll.GetLayout
- gdi32.dll.GdiRealizationInfo
- gdi32.dll.FontIsLinked
- advapi32.dll.RegOpenKeyExW
- advapi32.dll.RegQueryInfoKeyW
- gdi32.dll.GetTextFaceAliasW
- advapi32.dll.RegEnumValueW
- advapi32.dll.RegCloseKey
- advapi32.dll.RegQueryValueExW
- gdi32.dll.GetFontAssocStatus
- advapi32.dll.RegQueryValueExA
- advapi32.dll.RegEnumKeyExW
- dwmapi.dll.DwmIsCompositionEnabled
- gdi32.dll.GdiIsMetaPrintDC
- ole32.dll.CoInitializeEx
- ole32.dll.CoUninitialize
- cryptbase.dll.SystemFunction036
- ole32.dll.CoRegisterInitializeSpy
- ole32.dll.CoRevokeInitializeSpy
- kernel32.dll.SortGetHandle
- kernel32.dll.SortCloseHandle
- sechost.dll.OpenSCManagerW
- sechost.dll.OpenServiceW
- sechost.dll.QueryServiceStatus
- sechost.dll.CloseServiceHandle
- rpcrt4.dll.RpcStringBindingComposeW
- rpcrt4.dll.RpcBindingFromStringBindingW
- rpcrt4.dll.RpcStringFreeW
- mmdevapi.dll.#3
- wdmaud.drv.DriverProc
- wdmaud.drv.modMessage
- wdmaud.drv.midMessage
- rpcrt4.dll.NdrClientCall2
- wdmaud.drv.wodMessage
- mmdevapi.dll.DllGetClassObject
- ole32.dll.CoCreateFreeThreadedMarshaler
- setupapi.dll.SetupDiCreateDeviceInfoList
- kernel32.dll.RegOpenKeyExW
- kernel32.dll.RegCloseKey
- wdmaud.drv.mxdMessage
- ole32.dll.CoTaskMemAlloc
- shlwapi.dll.#487
- ole32.dll.CoTaskMemFree
- ole32.dll.PropVariantClear
- setupapi.dll.SetupDiOpenDeviceInfoW
- setupapi.dll.SetupDiGetDeviceInstanceIdW
- setupapi.dll.SetupDiGetDevicePropertyW
- shlwapi.dll.SHStrDupW
- audioses.dll.DllGetClassObject
- ole32.dll.NdrOleInitializeExtension
- ole32.dll.CoGetClassObject
- ole32.dll.CoGetMarshalSizeMax
- ole32.dll.CoMarshalInterface
- ole32.dll.CoUnmarshalInterface
- ole32.dll.StringFromIID
- ole32.dll.CoGetPSClsid
- ole32.dll.CoCreateInstance
- ole32.dll.CoReleaseMarshalData
- ole32.dll.DcomChannelSetHResult
- wdmaud.drv.widMessage
- msacm32.drv.DriverProc
- msacm32.drv.wodMessage
- msacm32.drv.widMessage
- midimap.dll.DriverProc
- midimap.dll.modMessage
Show More 65

Registry Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Segoe UI
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\2add11e25d07dc9e154ae1be916c869804047146.exe
- HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\CTF\EnableAnchorContext
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\KnownClasses
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DRIVERS32
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave1
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave2
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave3
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave4
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave5
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave6
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave7
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave8
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wave9
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi1
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi2
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi3
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi4
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi5
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi6
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi7
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi8
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midi9
- HKEY_CURRENT_USER\System\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\Winmm
- HKEY_CURRENT_USER\System\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\Winmm\wheel
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wdmaud.drv
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SESSION MANAGER\SafeProcessSearchMode
- HKEY_LOCAL_MACHINE\System\Setup
- HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{455ff7ad-7149-49e1-9900-d5acc7fb67ed}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{455ff7ad-7149-49e1-9900-d5acc7fb67ed}\Properties
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{455ff7ad-7149-49e1-9900-d5acc7fb67ed}\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{455ff7ad-7149-49e1-9900-d5acc7fb67ed}\Properties\{026e516e-b814-414b-83cd-856d6fef4822},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{455ff7ad-7149-49e1-9900-d5acc7fb67ed}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{455ff7ad-7149-49e1-9900-d5acc7fb67ed}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},6
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{455ff7ad-7149-49e1-9900-d5acc7fb67ed}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{455ff7ad-7149-49e1-9900-d5acc7fb67ed}\Properties\{1da5d803-d492-4edd-8c23-e0c0ffee7f0e},0
- HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{d39cf7fb-6b16-44c3-a019-e218374ed1f1}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{d39cf7fb-6b16-44c3-a019-e218374ed1f1}\Properties
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{d39cf7fb-6b16-44c3-a019-e218374ed1f1}\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{d39cf7fb-6b16-44c3-a019-e218374ed1f1}\Properties\{026e516e-b814-414b-83cd-856d6fef4822},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{d39cf7fb-6b16-44c3-a019-e218374ed1f1}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{d39cf7fb-6b16-44c3-a019-e218374ed1f1}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},6
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{d39cf7fb-6b16-44c3-a019-e218374ed1f1}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{d39cf7fb-6b16-44c3-a019-e218374ed1f1}\Properties\{1da5d803-d492-4edd-8c23-e0c0ffee7f0e},0
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{8afafb6a-f1b0-4935-be8a-5894d19191bd}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Capture\{8afafb6a-f1b0-4935-be8a-5894d19191bd}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Capture\{8afafb6a-f1b0-4935-be8a-5894d19191bd}\Properties
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Capture\{8afafb6a-f1b0-4935-be8a-5894d19191bd}\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Capture\{8afafb6a-f1b0-4935-be8a-5894d19191bd}\Properties\{026e516e-b814-414b-83cd-856d6fef4822},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Capture\{8afafb6a-f1b0-4935-be8a-5894d19191bd}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Capture\{8afafb6a-f1b0-4935-be8a-5894d19191bd}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},6
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Capture\{8afafb6a-f1b0-4935-be8a-5894d19191bd}\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc},1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Capture\{8afafb6a-f1b0-4935-be8a-5894d19191bd}\Properties\{1da5d803-d492-4edd-8c23-e0c0ffee7f0e},0
- HKEY_CURRENT_USER
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Multimedia\MIDIMap
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\wavemapper
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\DRIVERS32\midimapper
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\Render\{455ff7ad-7149-49e1-9900-d5acc7fb67ed}\DeviceState
- HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Audio
- HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Audio\UserDuckingPreference
Show More 97

Read Files

C:\Windows\Fonts\staticcache.dat
\Device\KsecDD
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\System32\tzres.dll
\??\PhysicalDrive0
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x89\xa0\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x89\xa2\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x89\xa4\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x89\xa6\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x8a\xb2\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x8b\xa4\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x8b\xa6\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x8d\x84\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x8d\x86\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x8e\x92\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x8f\x86\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x8f\xb2\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x90\x98\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x90\x9a\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x90\xbe\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x91\x92\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x91\x94\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x91\x96\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x92\x96\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x92\xac\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x92\xae\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x94\x82\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x94\x84\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x94\x86\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x95\x86\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x95\xae\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x96\x9a\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x96\xa8\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x96\xaa\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x96\xac\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x96\xae\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x98\x8a\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x98\xb8\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x98\xba\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x98\xbc\xc4\xa6
- C:\Users\user\AppData\Local\Temp\2add11e25d07dc9e1\xee\xb0\x8c\xea\xb7\x8f\xef\x8f\xa0=\xea\xa3\xb3\xe7\x9e\x88\xef\x9f\xb4=\xe4\x84\x8e\xe7\x9a\x8f\xe5\xaa\x90\xed\xad\xb5\xef\xbf\xbe\xef\xbf\xbf\xe4\x83\xba\xe7\x9a\x87\xe3\xaf\x9c\xe7\x9a\x87\xef\x9c\x9c=\xea\x98\xbe\xc4\xa6
- C:\Windows\System32\en-US\wdmaud.drv.mui
- C:\Windows\System32\en-US\MMDevAPI.DLL.mui
Show More 38

Mutexes

CicLoadWinStaWinSta0
Local\MSCTF.CtfMonitorInstMutexDefault1

Loading...