Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10_x64 -
resource
win10 -
submitted
08-10-2020 15:06
Static task
static1
Behavioral task
behavioral1
Sample
f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe
Resource
win7v200722
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe
Resource
win10
windows10_x64
0 signatures
0 seconds
General
-
Target
f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe
-
Size
2.4MB
-
MD5
c13d671ed16399a2b430c79b3200b425
-
SHA1
9acfb64b5617566d97a9ded3b295915035b3e3e7
-
SHA256
f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14
-
SHA512
1e4a9d96b8c0c3f967ccf52f7a3360e5a28929420475e565318c82e38fb75ed3039605f95d6e466e0d4f06100c4145800ca6bea2548d3d1ad89cc0d1093beef6
Malware Config
Extracted
Language
ps1
Source
URLs
ps1.dropper
http://myexternalip.com/raw
Signatures
-
Matrix Ransomware 673 IoCs
Targeted ransomware with information collection and encryption functionality.
Processes:
f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exeNW6U7626.exedescription flow ioc Process File created C:\Program Files\Mozilla Firefox\fonts\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\lv\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\mk\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\ProgramData\Mozilla\updates\308046B0AF4A39CB\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\qml\QtQuick\Templates.2\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\Settings\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\az\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\lua\http\dialogs\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\adm\pl\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\include\win32\bridge\#FOX_README#.rtf NW6U7626.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\el\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\or\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ug\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files (x86)\Google\Update\1.3.35.452\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\mn\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\#FOX_README#.rtf NW6U7626.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\include\win32\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\META-INF\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\Settings\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\gu\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\rw\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\adm\nl\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.HolographicFirstRun_cw5n1h2txyewy\Settings\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\configuration\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0lj62mcv.default-release\OfflineCache\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files (x86)\Google\Update\Install\{0FFF632F-1073-45B0-9B63-F95E8B1E38FA}\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\lt\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Packages\EnvironmentsApp_cw5n1h2txyewy\Settings\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\#FOX_README#.rtf NW6U7626.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\ja\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index-dir\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\mt-MT\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\pa-Arab-PK\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\PenWorkspace\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\Settings\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Roaming\Microsoft\Protect\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\lua\http\js\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\eu\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\qml\QtQuick\Controls\Styles\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\Videos\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\#FOX_README#.rtf NW6U7626.exe File created C:\Program Files\VideoLAN\VLC\locale\wa\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ne-NP\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\Searches\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\jfr\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\default_apps\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\html\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{892b8d0d-af4f-4998-8337-62e3f45408b2}\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy\Settings\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\odt\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\sw\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy\Settings\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\Documents\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\ProgramData\Package Cache\{CB0836EC-B072-368D-82B2-D3470BF95707}v12.0.40660\packages\vcRuntimeMinimum_amd64\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Comms\UnistoreDB\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\adm\ja\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\AppIconCache\100\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\db\#FOX_README#.rtf NW6U7626.exe File created C:\ProgramData\Microsoft\ClickToRun\ProductReleases\5A1DF312-5349-45A2-A5CA-533D6765243A\x-none.16\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\fur\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\#FOX_README#.rtf NW6U7626.exe File created C:\Program Files\VideoLAN\VLC\locale\af\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\ka\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Code Cache\js\index-dir\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\bin\server\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\hr\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\nn-NO\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\Saved Games\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\BrowserMetrics\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\hr\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy\Settings\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Roaming\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\lua\intf\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\lua\modules\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Public\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jre1.8.0_66\lib\deploy\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0lj62mcv.default-release\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\sq\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ha-Latn-NG\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy\Settings\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jre1.8.0_66\lib\ext\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\ProgramData\Oracle\Java\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\de\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\fil-PH\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\adm\pt-PT\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\configuration\org.eclipse.update\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\VisualElements\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Microsoft Office 15\ClientX64\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\sl\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\tt\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\Links\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Adobe\Color\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\#FOX_README#.rtf NW6U7626.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\#FOX_README#.rtf NW6U7626.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jre1.8.0_66\lib\security\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\ro\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\te\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\zh-TW\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{3fc61214-bc1b-4576-af78-4f1e254d515f}\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\lua\meta\reader\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\qml\QtQuick.2\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0lj62mcv.default-release\startupCache\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\en-US\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\Music\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Public\Libraries\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\Desktop\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Roaming\Microsoft\Templates\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\ProgramData\Package Cache\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}v12.0.40660\packages\vcRuntimeAdditional_amd64\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\adm\hu\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Public\Music\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\ta\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\uz\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\ProgramData\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\ProgramData\Microsoft\Crypto\SystemKeys\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\adm\ko\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\Contacts\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\All Users\Microsoft\UEV\Templates\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\sk\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\zu-ZA\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\it\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\jre\lib\security\#FOX_README#.rtf NW6U7626.exe File created C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0lj62mcv.default-release\storage\permanent\chrome\idb\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\jre\lib\amd64\#FOX_README#.rtf NW6U7626.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\#FOX_README#.rtf NW6U7626.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\#FOX_README#.rtf NW6U7626.exe File created C:\Program Files\Java\jre1.8.0_66\bin\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\sr-Latn-RS\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\km\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\adm\fr\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\skins\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\gl\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\hi\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\adm\zh-CN\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\TileDataLayer\Database\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\#FOX_README#.rtf NW6U7626.exe File created C:\Program Files\Java\jre1.8.0_66\lib\fonts\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\db\bin\#FOX_README#.rtf NW6U7626.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\#FOX_README#.rtf NW6U7626.exe File created C:\Program Files (x86)\Mozilla Maintenance Service\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\bs\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\lua\intf\modules\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\#FOX_README#.rtf NW6U7626.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\te\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Public\Downloads\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\jre\lib\cmm\#FOX_README#.rtf NW6U7626.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\#FOX_README#.rtf NW6U7626.exe File created C:\Program Files\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\tg\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Packages\DesktopLearning_cw5n1h2txyewy\Settings\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\ProgramData\Microsoft\SmsRouter\MessageStore\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\Settings\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ko\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\All Users\Microsoft\UEV\InboxTemplates\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\include\win32\bridge\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\83.0.4103.106\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\skins\fonts\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\lb-LU\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\hu\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Installer\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\yo-NG\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\Java\jre1.8.0_66\lib\jfr\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\be\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\da\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created \??\UNC\10.10.0.17\C$\Program Files\Java\jdk1.8.0_66\db\lib\#FOX_README#.rtf NW6U7626.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\cy-GB\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ky\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe File created C:\Program Files\VideoLAN\VLC\locale\ug\LC_MESSAGES\#FOX_README#.rtf f92a631f2f12e7ba8c9d031a31b5f4c1158e140665c5d081db55f67b11fb4a14.exe HTTP URL 289 http://fredstat.000webhostapp.com/addrecord.php?apikey=fox_api_key&compuser=GOHCSFBB|Admin&sid=HvbJpdx305VelTNl&phase=[DIR]40CD4EECB9B1AE0B