Threat Database Trojans Trojan.Filecoder.GN

Trojan.Filecoder.GN

By CagedTech in Trojans

Threat Scorecard

Popularity Rank: 23,442
Threat Level: 80 % (High)
Infected Computers: 21
First Seen: May 4, 2023
Last Seen: June 8, 2026
OS(es) Affected: Windows

The detection of Trojan.Filecoder.GN on your system indicates a potential security threat that requires immediate attention. This type of malware is designed to compromise the security and integrity of your computer, and it's essential to understand its nature and take steps to remove it to prevent further damage.

What Is Trojan.Filecoder.GN?

Trojan.Filecoder.GN is a type of Trojan horse malware that can infect your computer through various means, such as opening malicious email attachments, downloading infected software, or visiting compromised websites. The name "Trojan" refers to the malware's ability to disguise itself as a legitimate program or file, allowing it to bypass security measures and gain unauthorized access to your system.

How Trojan.Filecoder.GN Operates

Once installed, Trojan.Filecoder.GN can operate in the background, allowing attackers to access your system, steal sensitive information, or use your computer as a botnet to distribute malware or conduct other malicious activities. The malware can also modify system settings, create backdoors, and exploit vulnerabilities to maintain its presence on your computer. It's crucial to note that Trojan.Filecoder.GN can be highly sophisticated, making it challenging to detect and remove without proper tools and expertise.

Symptoms of Infection

Infected systems may exhibit various symptoms, including slow performance, frequent crashes, or unusual network activity. You may also notice unfamiliar programs or files on your computer, or receive unexpected pop-ups, alerts, or warnings. In some cases, the malware may encrypt your files, demanding a ransom in exchange for the decryption key. It's essential to be vigilant and monitor your system for any suspicious activity, as early detection can help prevent further damage.

  • Unexplained changes to system settings or files
  • Unfamiliar programs or icons on your desktop or taskbar
  • Slow system performance or frequent crashes
  • Unusual network activity or unexpected pop-ups

How to Remove Trojan.Filecoder.GN

  1. Boot your computer in Safe Mode with Networking to prevent the malware from loading and to allow for a more effective removal process.
  2. Use a reputable anti-malware tool, such as SpyHunter, to perform a full scan of your system and detect any malicious files or programs.
  3. Uninstall any suspicious programs or applications that may be related to the malware.
  4. Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any malicious extensions or add-ons.
  5. Reboot your computer and perform another full scan to ensure that the malware has been completely removed.

Conclusion

Removing Trojan.Filecoder.GN requires careful attention to detail and a thorough understanding of the malware's behavior. By following the steps outlined above and using reputable anti-malware tools, you can help protect your system and prevent further damage. It's essential to remain vigilant and monitor your system for any suspicious activity, as the threat landscape is constantly evolving. Remember to always keep your operating system, software, and security tools up to date to prevent similar infections in the future.

Analysis Report

General information

Family Name: Trojan.Filecoder.GN
Signature status: No Signature

Known Samples

MD5: 739a2a70fda4ae674d801f1e78852622
SHA1: d9de717b8ccb6a9ef466701d1e9c1e8564dcc4c9
SHA256: FA85845EE1C1CB3C30F22EABD5DFFFD8301B5C53CDF7CDC7AAEB13E4DA83A1B6
File Size: 602.11 KB, 602112 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have exports table
  • File doesn't have security information
  • File has TLS information
  • File is 64-bit executable
  • File is either console or GUI application
  • File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
  • File is Native application (NOT .NET application)
  • File is not packed
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
Show More
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

File Traits

  • fptable
  • No Version Info
  • x64

Block Information

Total Blocks: 1,798
Potentially Malicious Blocks: 233
Whitelisted Blocks: 1,508
Unknown Blocks: 57

Visual Map

0 0 0 0 0 0 0 0 ? x ? x x 0 x 0 x 0 x x x x 0 x x x x x x x ? x 0 x x 0 x x x x x 0 0 0 0 0 0 0 x x x x ? 0 x ? x ? ? x x 0 ? 0 ? ? 0 x x 0 ? ? ? x x 0 ? x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x x ? x x x x x x x x x x x x x x x x x x x x x x x x x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x x ? 0 0 ? ? ? ? 0 ? 0 ? 0 0 0 0 0 0 ? 0 0 0 x ? 0 0 0 0 0 0 0 0 0 0 0 0 x x ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 ? ? ? ? ? 0 ? 0 ? ? ? 0 ? ? ? 0 ? 0 x ? ? 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ? 0 x 0 0 0 x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 x x ? 0 0 0 0 0 0 0 0 0 ? 0 0 0 0 0 0 ? ? ? ? 0 x 0 ? x 0 ? x x x x 0 x 0 x x ? x ? 0 0 0 ? ? ? x x 0 x 0 x x 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 1 0 1 2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block

Similar Families

  • ShellcodeRunner.RG

Files Modified

File Attributes
Generic Write,Read Attributes
\\ Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\#howtorecover.txt Generic Write,Read Attributes
c:\$recycle.bin\s-1-5-18\#howtorecover.txt Generic Write,Read Attributes
c:\$recycle.bin\s-1-5-18\desktop.ini Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-18\desktop.ini.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\#howtorecover.txt Generic Write,Read Attributes
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i04oq7f.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i04oq7f.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i05wfli.log Generic Read,Write Data,Write Attributes,Write extended,Append data
Show More
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i05wfli.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i06zmt1.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i06zmt1.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i076dfy.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i076dfy.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i094j5s.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i094j5s.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0a6nuh.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0a6nuh.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0btbrf.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0btbrf.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0c0ire.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0c0ire.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0ckgeh.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0ckgeh.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0eebzi.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0eebzi.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0f5umt.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0f5umt.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0pyq8u.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0pyq8u.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0sck3x.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0sck3x.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0tkkcv.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0tkkcv.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0uu0iu.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0uu0iu.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0w21gh.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0w21gh.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0xf2ty.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0xf2ty.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0yfdci.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i0yfdci.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i192hj7.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i192hj7.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i19tmd4.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i19tmd4.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i1cz6ul.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i1cz6ul.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i1i0hzm.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i1i0hzm.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i1jli79.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i1jli79.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i1lgtec.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i1lgtec.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i1mn4k3.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i1mn4k3.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i1pz2xr.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i1pz2xr.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i1w2yrz.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i1w2yrz.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i1ydjgi.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i1ydjgi.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i21h8yb.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i21h8yb.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i21snxl.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i21snxl.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i298kae.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i298kae.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2dqr7v.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2dqr7v.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2er46h.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2er46h.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2giipn.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2giipn.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2j8pi1.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2j8pi1.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2jcwr1.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2jcwr1.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2k4naj.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2k4naj.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2lifmv.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2lifmv.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2p7fsp.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2p7fsp.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2qyu4d.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2qyu4d.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2zglpa.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i2zglpa.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3027t8.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3027t8.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i32porv.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i32porv.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i359uky.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i359uky.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i36l6gb.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i36l6gb.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3dq8e2.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3dq8e2.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3fapwf.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3fapwf.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3fhone.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3fhone.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3hju65.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3hju65.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3jw0wc.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3jw0wc.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3m0t0i.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3m0t0i.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3mabnt.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3mabnt.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3mvjhj.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3mvjhj.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3n0bw3.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3n0bw3.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3p5r5c.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3p5r5c.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3ptqxp.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3ptqxp.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3qswch.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3qswch.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3u3ht0.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3u3ht0.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3uijc1.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3uijc1.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3vldrk.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3vldrk.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3wnhbh.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3wnhbh.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3xb0xo.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3xb0xo.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3xdo6s.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3xdo6s.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3y7ehn.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i3y7ehn.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4160hz.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4160hz.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i457pga.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i457pga.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i483cox.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i483cox.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4epfio.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4epfio.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4ohgx0.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4ohgx0.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4qtg1e.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4qtg1e.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4ss6dp.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4ss6dp.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4t3qsv.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4t3qsv.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4ufqpo.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4ufqpo.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4yi6ys.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4yi6ys.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4zl4xu.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i4zl4xu.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i51pwwd.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i51pwwd.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i51qvqk.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i51qvqk.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i52r0qq.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i52r0qq.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i530kzb.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i530kzb.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5c40rh.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5c40rh.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5e4ijg.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5e4ijg.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5hgdpk.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5hgdpk.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5l08j0.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5l08j0.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5le2zc.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5le2zc.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5nn7nm.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5nn7nm.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5osd9p.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5osd9p.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5rce49.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5rce49.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5uda30.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5uda30.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5ycv28.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5ycv28.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5ynnex.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5ynnex.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5ztu8g.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i5ztu8g.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i660wyh.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i660wyh.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i6em4mb.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i6em4mb.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i6iuor3.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i6iuor3.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i6j5h3s.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i6j5h3s.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i6lth4h.log Generic Read,Write Data,Write Attributes,Write extended,Append data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i6lth4h.log.[id-54318949].[davidrmg2219@gmail.com].rmg Synchronize,Write Data
c:\$recycle.bin\s-1-5-21-3119368278-1123331430-659265220-1001\$i6q0rkt.log Generic Read,Write Data,Write Attributes,Write extended,Append data

894 additional files are not displayed above.

Windows API Usage

Category API
Syscall Use
  • ntdll.dll!NtAccessCheckByType
  • ntdll.dll!NtAlertThreadByThreadId
  • ntdll.dll!NtAlpcAcceptConnectPort
  • ntdll.dll!NtAlpcConnectPort
  • ntdll.dll!NtAlpcConnectPortEx
  • ntdll.dll!NtAlpcCreatePort
  • ntdll.dll!NtAlpcCreateSecurityContext
  • ntdll.dll!NtAlpcDeleteSecurityContext
  • ntdll.dll!NtAlpcQueryInformation
  • ntdll.dll!NtAlpcSendWaitReceivePort
Show More
  • ntdll.dll!NtAlpcSetInformation
  • ntdll.dll!NtApphelpCacheControl
  • ntdll.dll!NtAssociateWaitCompletionPacket
  • ntdll.dll!NtClearEvent
  • ntdll.dll!NtClose
  • ntdll.dll!NtCompareSigningLevels
  • ntdll.dll!NtCreateEvent
  • ntdll.dll!NtCreateFile
  • ntdll.dll!NtCreateIoCompletion
  • ntdll.dll!NtCreateKey
  • ntdll.dll!NtCreateMutant
  • ntdll.dll!NtCreateSection
  • ntdll.dll!NtCreateSemaphore
  • ntdll.dll!NtCreateThreadEx
  • ntdll.dll!NtCreateTimer
  • ntdll.dll!NtCreateTimer2
  • ntdll.dll!NtCreateWaitCompletionPacket
  • ntdll.dll!NtCreateWorkerFactory
  • ntdll.dll!NtDelayExecution
  • ntdll.dll!NtDeviceIoControlFile
  • ntdll.dll!NtDuplicateObject
  • ntdll.dll!NtEnumerateKey
  • ntdll.dll!NtEnumerateValueKey
  • ntdll.dll!NtFreeVirtualMemory
  • ntdll.dll!NtGetCachedSigningLevel
  • ntdll.dll!NtImpersonateAnonymousToken
  • ntdll.dll!NtMapViewOfSection
  • ntdll.dll!NtNotifyChangeKey
  • ntdll.dll!NtOpenDirectoryObject
  • ntdll.dll!NtOpenEvent
  • ntdll.dll!NtOpenFile
  • ntdll.dll!NtOpenKey
  • ntdll.dll!NtOpenKeyEx
  • ntdll.dll!NtOpenProcessToken
  • ntdll.dll!NtOpenSection
  • ntdll.dll!NtOpenSemaphore
  • ntdll.dll!NtOpenThreadToken
  • ntdll.dll!NtProtectVirtualMemory
  • ntdll.dll!NtQueryAttributesFile
  • ntdll.dll!NtQueryDirectoryFileEx
  • ntdll.dll!NtQueryInformationFile
  • ntdll.dll!NtQueryInformationProcess
  • ntdll.dll!NtQueryInformationThread
  • ntdll.dll!NtQueryInformationToken
  • ntdll.dll!NtQueryKey
  • ntdll.dll!NtQueryLicenseValue
  • ntdll.dll!NtQueryObject
  • ntdll.dll!NtQueryPerformanceCounter
  • ntdll.dll!NtQuerySecurityAttributesToken
  • ntdll.dll!NtQuerySecurityObject
  • ntdll.dll!NtQuerySystemInformation
  • ntdll.dll!NtQuerySystemInformationEx
  • ntdll.dll!NtQueryValueKey
  • ntdll.dll!NtQueryWnfStateData
  • ntdll.dll!NtReadFile
  • ntdll.dll!NtReleaseMutant
  • ntdll.dll!NtReleaseSemaphore
  • ntdll.dll!NtReleaseWorkerFactoryWorker
  • ntdll.dll!NtRemoveIoCompletion
  • ntdll.dll!NtSetEvent
  • ntdll.dll!NtSetInformationFile
  • ntdll.dll!NtSetInformationKey
  • ntdll.dll!NtSetInformationObject
  • ntdll.dll!NtSetInformationProcess
  • ntdll.dll!NtSetInformationThread
  • ntdll.dll!NtSetInformationVirtualMemory
  • ntdll.dll!NtSetInformationWorkerFactory
  • ntdll.dll!NtSetIoCompletion
  • ntdll.dll!NtSetTimer2
  • ntdll.dll!NtSetTimerEx
  • ntdll.dll!NtSubscribeWnfStateChange
  • ntdll.dll!NtTestAlert
  • ntdll.dll!NtTraceControl
  • ntdll.dll!NtTraceEvent
  • ntdll.dll!NtUnmapViewOfSection
  • ntdll.dll!NtUnmapViewOfSectionEx
  • ntdll.dll!NtWaitForAlertByThreadId
  • ntdll.dll!NtWaitForMultipleObjects
  • ntdll.dll!NtWaitForSingleObject
  • ntdll.dll!NtWaitForWorkViaWorkerFactory
  • ntdll.dll!NtWorkerFactoryWorkerReady
  • ntdll.dll!NtWriteFile
  • UNKNOWN
Encryption Used
  • BCryptOpenAlgorithmProvider

Trending

Most Viewed

Loading...