popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

blackmatter.exe

BlackMatter Ransomware PE32 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Sept. 7, 2021, 3:02 p.m. Sept. 7, 2021, 3:05 p.m.
Size 79.0KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 18c7c940bc6a4e778fbdf4a3e28151a8
SHA256 2e50eb85f6e271001e69c5733af95c34728893145766066c5ff8708dcc0e43b2
CRC32 2EA4F3EA
ssdeep 1536:+nICS4ArFnRoHhcVyid9EZZoi+zQXFpVX42N:5ZnmqVyq9EN+Mb7
Yara
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • BlackMatter_Ransomware_IN - BlackMatter Ransomware

Name Response Post-Analysis Lookup
nowautomation.com
mojobiden.com
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GetComputerNameW

 computer_name:
0 0

GetComputerNameW

 computer_name: TEST22-PC
1 1 0

GetComputerNameW

 computer_name: TEST22-PC
1 1 0
registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\MachineGuid
Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

 1 1 0
Time & API Arguments Status Return Repeated

NtAllocateVirtualMemory

 process_identifier: 2768
region_size: 655360
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x00390000
allocation_type: 8192 (MEM_RESERVE)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 2768
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x003f0000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 2768
region_size: 16384
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x003f1000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 2768
region_size: 69632
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x003f5000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0

NtAllocateVirtualMemory

 process_identifier: 2768
region_size: 4096
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x00406000
allocation_type: 4096 (MEM_COMMIT)
process_handle: 0xffffffff
1 0 0
Time & API Arguments Status Return Repeated

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 13726547968
free_bytes_available: 0
root_path: C:\
total_number_of_bytes: 34252779520
1 1 0
section {u'size_of_data': u'0x00001000', u'virtual_address': u'0x00013000', u'entropy': 7.579009842709062, u'name': u'.data', u'virtual_size': u'0x00002138'} entropy 7.57900984271 description A section with a high entropy has been found
section {u'size_of_data': u'0x00001000', u'virtual_address': u'0x00016000', u'entropy': 7.696870283824036, u'name': u'.rsrc', u'virtual_size': u'0x00000eb4'} entropy 7.69687028382 description A section with a high entropy has been found
Time & API Arguments Status Return Repeated

NtTerminateProcess

 status_code: 0x00000000
process_identifier: 2816
process_handle: 0x000003f4
0 0

NtTerminateProcess

 status_code: 0x00000000
process_identifier: 2816
process_handle: 0x000003f4
1 0 0
Time & API Arguments Status Return Repeated

ControlService

 service_handle: 0x006c9730
service_name: vss
control_code: 1
1 1 0
file C:\Python27\agent.pyw
file C:\tmptgehzx\analyzer.py
file C:\Python27\tcl\tcl8.5\encoding\euc-cn.enc
file C:\Python27\tcl\tcl8.5\encoding\iso8859-3.enc
file C:\Python27\tcl\tcl8.5\encoding\iso2022-kr.enc
file C:\Python27\tcl\tcl8.5\encoding\cp857.enc
file C:\Python27\tcl\tcl8.5\encoding\macIceland.enc
file C:\Python27\tcl\tcl8.5\encoding\macCyrillic.enc
file C:\Python27\tcl\tcl8.5\encoding\iso8859-8.enc
file C:\Python27\tcl\tcl8.5\encoding\cp860.enc
file C:\Python27\tcl\tcl8.5\encoding\cp861.enc
file C:\Python27\tcl\tcl8.5\encoding\macGreek.enc
file C:\Python27\tcl\tcl8.5\encoding\gb12345.enc
file C:\Python27\tcl\tcl8.5\encoding\cp1254.enc
file C:\Python27\tcl\tcl8.5\encoding\cp1255.enc
file C:\Python27\tcl\tcl8.5\encoding\iso8859-2.enc
file C:\Python27\tcl\tcl8.5\encoding\cp865.enc
file C:\Python27\tcl\tcl8.5\encoding\cp949.enc
file C:\Python27\tcl\tcl8.5\encoding\cp437.enc
file C:\Python27\tcl\tcl8.5\encoding\cp775.enc
file C:\Python27\tcl\tcl8.5\encoding\iso8859-14.enc
file C:\Python27\tcl\tcl8.5\encoding\big5.enc
file C:\Python27\tcl\tcl8.5\encoding\cp864.enc
file C:\Python27\tcl\tcl8.5\encoding\iso2022-jp.enc
file C:\Python27\tcl\tcl8.5\encoding\cp869.enc
file C:\Python27\tcl\tcl8.5\encoding\iso8859-5.enc
file C:\Python27\tcl\tcl8.5\encoding\cp1252.enc
file C:\Python27\tcl\tcl8.5\encoding\cp874.enc
file C:\Python27\tcl\tcl8.5\encoding\macRoman.enc
file C:\Python27\tcl\tcl8.5\encoding\gb1988.enc
file C:\Python27\tcl\tcl8.5\encoding\iso8859-15.enc
file C:\Python27\tcl\tcl8.5\encoding\ebcdic.enc
file C:\Python27\tcl\tcl8.5\encoding\ascii.enc
file C:\Python27\tcl\tcl8.5\encoding\cp1258.enc
file C:\Python27\tcl\tcl8.5\encoding\shiftjis.enc
file C:\Python27\tcl\tcl8.5\encoding\macCentEuro.enc
file C:\Python27\tcl\tcl8.5\encoding\cp850.enc
file C:\Python27\tcl\tcl8.5\encoding\jis0212.enc
file C:\Python27\tcl\tcl8.5\encoding\cp1251.enc
file C:\Python27\tcl\tcl8.5\encoding\iso8859-9.enc
file C:\Python27\tcl\tcl8.5\encoding\euc-jp.enc
file C:\Python27\tcl\tcl8.5\encoding\euc-kr.enc
file C:\Python27\tcl\tcl8.5\encoding\cp863.enc
file C:\Python27\tcl\tcl8.5\encoding\macUkraine.enc
file C:\Python27\tcl\tcl8.5\encoding\iso8859-1.enc
file C:\Python27\tcl\tcl8.5\encoding\macRomania.enc
file C:\Python27\tcl\tcl8.5\encoding\jis0201.enc
file C:\Python27\tcl\tcl8.5\encoding\macDingbats.enc
file C:\Python27\tcl\tcl8.5\encoding\iso8859-4.enc
file C:\Python27\tcl\tcl8.5\encoding\cp1250.enc
file C:\Python27\tcl\tcl8.5\encoding\cp862.enc
file C:\Python27\tcl\tcl8.5\encoding\cp936.enc
Bkav W32.AIDetect.malware1
Lionic Trojan.Win32.Agent.j!c
Elastic malicious (high confidence)
Cynet Malicious (score: 100)
ALYac Trojan.Ransom.Filecoder
Malwarebytes Malware.AI.2269706687
Zillya Trojan.Encoder.Win32.2652
CrowdStrike win/malicious_confidence_100% (W)
Alibaba Ransom:Win32/BlackMatter.52106dd5
K7GW Trojan ( 005811bc1 )
K7AntiVirus Trojan ( 005811bc1 )
Arcabit Trojan.Mint.Zard.25
Cyren W32/Ransom.IDEX-9229
Symantec Downloader
ESET-NOD32 a variant of Win32/Filecoder.BlackMatter.C
APEX Malicious
Paloalto generic.ml
Kaspersky Trojan-Ransom.Win32.Encoder.nqg
BitDefender Gen:Heur.Mint.Zard.25
NANO-Antivirus Virus.Win32.Gen.ccmw
MicroWorld-eScan Gen:Heur.Mint.Zard.25
Avast Win32:BlackMatter-C [Ransom]
Rising Trojan.Generic@ML.90 (RDML:qyeJDApQr3Dfr2VT4pj7Hw)
Ad-Aware Gen:Heur.Mint.Zard.25
Sophos Mal/Generic-S
Comodo Malware@#2sxlbnmiataa1
F-Secure Heuristic.HEUR/AGEN.1137758
DrWeb Trojan.Encoder.34313
TrendMicro Ransom.Win32.BLACKMATTER.SMYXBHMT
McAfee-GW-Edition BehavesLike.Win32.Generic.lh
FireEye Generic.mg.18c7c940bc6a4e77
Emsisoft Gen:Heur.Mint.Zard.25 (B)
Ikarus Trojan-Ransom.BlackMatter
Webroot W32.Ransom.Blackmatter
Avira HEUR/AGEN.1137758
Antiy-AVL Trojan/Generic.ASMalwS.3477A08
Gridinsoft Ransom.Win32.AI.oa
Microsoft Ransom:Win32/BlackMatter.MAK!MTB
ZoneAlarm Trojan-Ransom.Win32.Encoder.nqg
GData Gen:Heur.Mint.Zard.25
AhnLab-V3 Ransomware/Win.BlackMatter.C4575089
McAfee GenericRXPT-HJ!18C7C940BC6A
MAX malware (ai score=85)
VBA32 TScope.Malware-Cryptor.SB
Cylance Unsafe
Tencent Malware.Win32.Gencirc.11c9e56f
Yandex Trojan.Encoder!tlTvXNFaIrI
SentinelOne Static AI - Malicious PE
Fortinet W32/BlackMatter.A!tr.ransom
BitDefenderTheta AI:Packer.528983E61E
Time & API Arguments Status Return Repeated

MoveFileWithProgressW

 newfilepath_r: \\?\C:\readme.txt.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\readme.txt
newfilepath: C:\readme.txt.twSpMDCpB
oldfilepath: C:\readme.txt
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\util\mini-KMS_Activator_v1.1_Office.2010.VL.ENG.txt.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\util\mini-KMS_Activator_v1.1_Office.2010.VL.ENG.txt
newfilepath: C:\util\mini-KMS_Activator_v1.1_Office.2010.VL.ENG.txt.twSpMDCpB
oldfilepath: C:\util\mini-KMS_Activator_v1.1_Office.2010.VL.ENG.txt
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\util\pafish.log.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\util\pafish.log
newfilepath: C:\util\pafish.log.twSpMDCpB
oldfilepath: C:\util\pafish.log
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\util\vm_setting.reg.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\util\vm_setting.reg
newfilepath: C:\util\vm_setting.reg.twSpMDCpB
oldfilepath: C:\util\vm_setting.reg
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\util\TCPView\Eula.txt.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\util\TCPView\Eula.txt
newfilepath: C:\util\TCPView\Eula.txt.twSpMDCpB
oldfilepath: C:\util\TCPView\Eula.txt
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\util\TCPView\tcpview.chm.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\util\TCPView\tcpview.chm
newfilepath: C:\util\TCPView\tcpview.chm.twSpMDCpB
oldfilepath: C:\util\TCPView\tcpview.chm
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\util\ProcessMonitor\Eula.txt.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\util\ProcessMonitor\Eula.txt
newfilepath: C:\util\ProcessMonitor\Eula.txt.twSpMDCpB
oldfilepath: C:\util\ProcessMonitor\Eula.txt
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\util\ProcessMonitor\procmon.chm.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\util\ProcessMonitor\procmon.chm
newfilepath: C:\util\ProcessMonitor\procmon.chm.twSpMDCpB
oldfilepath: C:\util\ProcessMonitor\procmon.chm
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Searches\Everywhere.search-ms.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Searches\Everywhere.search-ms
newfilepath: C:\Users\test22\Searches\Everywhere.search-ms.twSpMDCpB
oldfilepath: C:\Users\test22\Searches\Everywhere.search-ms
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Searches\Indexed Locations.search-ms.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Searches\Indexed Locations.search-ms
newfilepath: C:\Users\test22\Searches\Indexed Locations.search-ms.twSpMDCpB
oldfilepath: C:\Users\test22\Searches\Indexed Locations.search-ms
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Pictures\readme.bmp.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Pictures\readme.bmp
newfilepath: C:\Users\test22\Pictures\readme.bmp.twSpMDCpB
oldfilepath: C:\Users\test22\Pictures\readme.bmp
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Windows Live\Windows Live 갤러리.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Windows Live\Windows Live 갤러리.url
newfilepath: C:\Users\test22\Favorites\Windows Live\Windows Live 갤러리.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Windows Live\Windows Live 갤러리.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Windows Live\Windows Live 메일.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Windows Live\Windows Live 메일.url
newfilepath: C:\Users\test22\Favorites\Windows Live\Windows Live 메일.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Windows Live\Windows Live 메일.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Windows Live\Windows Live 스페이스.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Windows Live\Windows Live 스페이스.url
newfilepath: C:\Users\test22\Favorites\Windows Live\Windows Live 스페이스.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Windows Live\Windows Live 스페이스.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Windows Live\Windows Live 패키지 다운로드.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Windows Live\Windows Live 패키지 다운로드.url
newfilepath: C:\Users\test22\Favorites\Windows Live\Windows Live 패키지 다운로드.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Windows Live\Windows Live 패키지 다운로드.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN 금융.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN 금융.url
newfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN 금융.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN 금융.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN 뉴스.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN 뉴스.url
newfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN 뉴스.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN 뉴스.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN 스포츠.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN 스포츠.url
newfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN 스포츠.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN 스포츠.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN 연예.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN 연예.url
newfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN 연예.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN 연예.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN.url
newfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Microsoft 웹 사이트\IE 홈.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Microsoft 웹 사이트\IE 홈.url
newfilepath: C:\Users\test22\Favorites\Microsoft 웹 사이트\IE 홈.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Microsoft 웹 사이트\IE 홈.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Microsoft 웹 사이트\Microsoft Store.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Microsoft 웹 사이트\Microsoft Store.url
newfilepath: C:\Users\test22\Favorites\Microsoft 웹 사이트\Microsoft Store.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Microsoft 웹 사이트\Microsoft Store.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Microsoft Websites\IE 추가 기능 갤러리.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Microsoft Websites\IE 추가 기능 갤러리.url
newfilepath: C:\Users\test22\Favorites\Microsoft Websites\IE 추가 기능 갤러리.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Microsoft Websites\IE 추가 기능 갤러리.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\e뮤지엄.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\e뮤지엄.url
newfilepath: C:\Users\test22\Favorites\Links for 대한민국\e뮤지엄.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Links for 대한민국\e뮤지엄.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\대한민국 구석구석.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\대한민국 구석구석.url
newfilepath: C:\Users\test22\Favorites\Links for 대한민국\대한민국 구석구석.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Links for 대한민국\대한민국 구석구석.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\대한민국 전자정부.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\대한민국 전자정부.url
newfilepath: C:\Users\test22\Favorites\Links for 대한민국\대한민국 전자정부.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Links for 대한민국\대한민국 전자정부.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\에듀넷.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\에듀넷.url
newfilepath: C:\Users\test22\Favorites\Links for 대한민국\에듀넷.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Links for 대한민국\에듀넷.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\예술로.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\예술로.url
newfilepath: C:\Users\test22\Favorites\Links for 대한민국\예술로.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Links for 대한민국\예술로.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\전자민원G4C.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\전자민원G4C.url
newfilepath: C:\Users\test22\Favorites\Links for 대한민국\전자민원G4C.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Links for 대한민국\전자민원G4C.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Links\웹 조각 갤러리.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Links\웹 조각 갤러리.url
newfilepath: C:\Users\test22\Favorites\Links\웹 조각 갤러리.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Links\웹 조각 갤러리.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Links\추천 사이트.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Links\추천 사이트.url
newfilepath: C:\Users\test22\Favorites\Links\추천 사이트.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Links\추천 사이트.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\ATwjKHHgPIXqpQbCw.doc.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\ATwjKHHgPIXqpQbCw.doc
newfilepath: C:\Users\test22\Documents\ATwjKHHgPIXqpQbCw.doc.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\ATwjKHHgPIXqpQbCw.doc
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\axTZwDBeUngqBG.ppt.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\axTZwDBeUngqBG.ppt
newfilepath: C:\Users\test22\Documents\axTZwDBeUngqBG.ppt.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\axTZwDBeUngqBG.ppt
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\BKEZepJtdwTS.doc.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\BKEZepJtdwTS.doc
newfilepath: C:\Users\test22\Documents\BKEZepJtdwTS.doc.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\BKEZepJtdwTS.doc
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\CJgZNzWBCXYHnBkZq.txt.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\CJgZNzWBCXYHnBkZq.txt
newfilepath: C:\Users\test22\Documents\CJgZNzWBCXYHnBkZq.txt.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\CJgZNzWBCXYHnBkZq.txt
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\cXMLMLMlMJidCP.doc.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\cXMLMLMlMJidCP.doc
newfilepath: C:\Users\test22\Documents\cXMLMLMlMJidCP.doc.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\cXMLMLMlMJidCP.doc
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\EYBTNLbmUPSNwzoitY.rtf.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\EYBTNLbmUPSNwzoitY.rtf
newfilepath: C:\Users\test22\Documents\EYBTNLbmUPSNwzoitY.rtf.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\EYBTNLbmUPSNwzoitY.rtf
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\FAaWoqRZplEQFsGvV.docm.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\FAaWoqRZplEQFsGvV.docm
newfilepath: C:\Users\test22\Documents\FAaWoqRZplEQFsGvV.docm.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\FAaWoqRZplEQFsGvV.docm
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\FOwRatdvSt.docm.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\FOwRatdvSt.docm
newfilepath: C:\Users\test22\Documents\FOwRatdvSt.docm.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\FOwRatdvSt.docm
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\GlUCAtzEAEmoE.docm.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\GlUCAtzEAEmoE.docm
newfilepath: C:\Users\test22\Documents\GlUCAtzEAEmoE.docm.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\GlUCAtzEAEmoE.docm
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\gxeffFGQwhrjD.rtf.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\gxeffFGQwhrjD.rtf
newfilepath: C:\Users\test22\Documents\gxeffFGQwhrjD.rtf.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\gxeffFGQwhrjD.rtf
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\JDHeJjBWHuxqp.doc.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\JDHeJjBWHuxqp.doc
newfilepath: C:\Users\test22\Documents\JDHeJjBWHuxqp.doc.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\JDHeJjBWHuxqp.doc
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\jsGIrPlHsPM.txt.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\jsGIrPlHsPM.txt
newfilepath: C:\Users\test22\Documents\jsGIrPlHsPM.txt.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\jsGIrPlHsPM.txt
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\NsyJVJnTKf.docx.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\NsyJVJnTKf.docx
newfilepath: C:\Users\test22\Documents\NsyJVJnTKf.docx.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\NsyJVJnTKf.docx
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\ONyeiyAHXnG.docx.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\ONyeiyAHXnG.docx
newfilepath: C:\Users\test22\Documents\ONyeiyAHXnG.docx.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\ONyeiyAHXnG.docx
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\oyiUlRmkVDmdx.rtf.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\oyiUlRmkVDmdx.rtf
newfilepath: C:\Users\test22\Documents\oyiUlRmkVDmdx.rtf.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\oyiUlRmkVDmdx.rtf
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\QAXyTXeWuxZprZY.rtf.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\QAXyTXeWuxZprZY.rtf
newfilepath: C:\Users\test22\Documents\QAXyTXeWuxZprZY.rtf.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\QAXyTXeWuxZprZY.rtf
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\qepPpGHizxfbWQe.ppt.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\qepPpGHizxfbWQe.ppt
newfilepath: C:\Users\test22\Documents\qepPpGHizxfbWQe.ppt.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\qepPpGHizxfbWQe.ppt
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\readme.bmp.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\readme.bmp
newfilepath: C:\Users\test22\Documents\readme.bmp.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\readme.bmp
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\readme.c.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\readme.c
newfilepath: C:\Users\test22\Documents\readme.c.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\readme.c
1 1 0
Time & API Arguments Status Return Repeated

MoveFileWithProgressW

 newfilepath_r: \\?\C:\readme.txt.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\readme.txt
newfilepath: C:\readme.txt.twSpMDCpB
oldfilepath: C:\readme.txt
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\util\mini-KMS_Activator_v1.1_Office.2010.VL.ENG.txt.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\util\mini-KMS_Activator_v1.1_Office.2010.VL.ENG.txt
newfilepath: C:\util\mini-KMS_Activator_v1.1_Office.2010.VL.ENG.txt.twSpMDCpB
oldfilepath: C:\util\mini-KMS_Activator_v1.1_Office.2010.VL.ENG.txt
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\util\pafish.log.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\util\pafish.log
newfilepath: C:\util\pafish.log.twSpMDCpB
oldfilepath: C:\util\pafish.log
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\util\vm_setting.reg.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\util\vm_setting.reg
newfilepath: C:\util\vm_setting.reg.twSpMDCpB
oldfilepath: C:\util\vm_setting.reg
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\util\TCPView\Eula.txt.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\util\TCPView\Eula.txt
newfilepath: C:\util\TCPView\Eula.txt.twSpMDCpB
oldfilepath: C:\util\TCPView\Eula.txt
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\util\TCPView\tcpview.chm.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\util\TCPView\tcpview.chm
newfilepath: C:\util\TCPView\tcpview.chm.twSpMDCpB
oldfilepath: C:\util\TCPView\tcpview.chm
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\util\ProcessMonitor\Eula.txt.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\util\ProcessMonitor\Eula.txt
newfilepath: C:\util\ProcessMonitor\Eula.txt.twSpMDCpB
oldfilepath: C:\util\ProcessMonitor\Eula.txt
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\util\ProcessMonitor\procmon.chm.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\util\ProcessMonitor\procmon.chm
newfilepath: C:\util\ProcessMonitor\procmon.chm.twSpMDCpB
oldfilepath: C:\util\ProcessMonitor\procmon.chm
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Searches\Everywhere.search-ms.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Searches\Everywhere.search-ms
newfilepath: C:\Users\test22\Searches\Everywhere.search-ms.twSpMDCpB
oldfilepath: C:\Users\test22\Searches\Everywhere.search-ms
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Searches\Indexed Locations.search-ms.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Searches\Indexed Locations.search-ms
newfilepath: C:\Users\test22\Searches\Indexed Locations.search-ms.twSpMDCpB
oldfilepath: C:\Users\test22\Searches\Indexed Locations.search-ms
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Pictures\readme.bmp.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Pictures\readme.bmp
newfilepath: C:\Users\test22\Pictures\readme.bmp.twSpMDCpB
oldfilepath: C:\Users\test22\Pictures\readme.bmp
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Windows Live\Windows Live 갤러리.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Windows Live\Windows Live 갤러리.url
newfilepath: C:\Users\test22\Favorites\Windows Live\Windows Live 갤러리.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Windows Live\Windows Live 갤러리.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Windows Live\Windows Live 메일.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Windows Live\Windows Live 메일.url
newfilepath: C:\Users\test22\Favorites\Windows Live\Windows Live 메일.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Windows Live\Windows Live 메일.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Windows Live\Windows Live 스페이스.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Windows Live\Windows Live 스페이스.url
newfilepath: C:\Users\test22\Favorites\Windows Live\Windows Live 스페이스.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Windows Live\Windows Live 스페이스.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Windows Live\Windows Live 패키지 다운로드.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Windows Live\Windows Live 패키지 다운로드.url
newfilepath: C:\Users\test22\Favorites\Windows Live\Windows Live 패키지 다운로드.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Windows Live\Windows Live 패키지 다운로드.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN 금융.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN 금융.url
newfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN 금융.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN 금융.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN 뉴스.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN 뉴스.url
newfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN 뉴스.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN 뉴스.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN 스포츠.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN 스포츠.url
newfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN 스포츠.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN 스포츠.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN 연예.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN 연예.url
newfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN 연예.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN 연예.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\MSN 웹 사이트\MSN.url
newfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\MSN 웹 사이트\MSN.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Microsoft 웹 사이트\IE 홈.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Microsoft 웹 사이트\IE 홈.url
newfilepath: C:\Users\test22\Favorites\Microsoft 웹 사이트\IE 홈.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Microsoft 웹 사이트\IE 홈.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Microsoft 웹 사이트\Microsoft Store.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Microsoft 웹 사이트\Microsoft Store.url
newfilepath: C:\Users\test22\Favorites\Microsoft 웹 사이트\Microsoft Store.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Microsoft 웹 사이트\Microsoft Store.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Microsoft Websites\IE 추가 기능 갤러리.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Microsoft Websites\IE 추가 기능 갤러리.url
newfilepath: C:\Users\test22\Favorites\Microsoft Websites\IE 추가 기능 갤러리.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Microsoft Websites\IE 추가 기능 갤러리.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\e뮤지엄.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\e뮤지엄.url
newfilepath: C:\Users\test22\Favorites\Links for 대한민국\e뮤지엄.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Links for 대한민국\e뮤지엄.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\대한민국 구석구석.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\대한민국 구석구석.url
newfilepath: C:\Users\test22\Favorites\Links for 대한민국\대한민국 구석구석.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Links for 대한민국\대한민국 구석구석.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\대한민국 전자정부.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\대한민국 전자정부.url
newfilepath: C:\Users\test22\Favorites\Links for 대한민국\대한민국 전자정부.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Links for 대한민국\대한민국 전자정부.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\에듀넷.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\에듀넷.url
newfilepath: C:\Users\test22\Favorites\Links for 대한민국\에듀넷.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Links for 대한민국\에듀넷.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\예술로.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\예술로.url
newfilepath: C:\Users\test22\Favorites\Links for 대한민국\예술로.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Links for 대한민국\예술로.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\전자민원G4C.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Links for 대한민국\전자민원G4C.url
newfilepath: C:\Users\test22\Favorites\Links for 대한민국\전자민원G4C.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Links for 대한민국\전자민원G4C.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Links\웹 조각 갤러리.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Links\웹 조각 갤러리.url
newfilepath: C:\Users\test22\Favorites\Links\웹 조각 갤러리.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Links\웹 조각 갤러리.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Favorites\Links\추천 사이트.url.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Favorites\Links\추천 사이트.url
newfilepath: C:\Users\test22\Favorites\Links\추천 사이트.url.twSpMDCpB
oldfilepath: C:\Users\test22\Favorites\Links\추천 사이트.url
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\ATwjKHHgPIXqpQbCw.doc.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\ATwjKHHgPIXqpQbCw.doc
newfilepath: C:\Users\test22\Documents\ATwjKHHgPIXqpQbCw.doc.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\ATwjKHHgPIXqpQbCw.doc
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\axTZwDBeUngqBG.ppt.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\axTZwDBeUngqBG.ppt
newfilepath: C:\Users\test22\Documents\axTZwDBeUngqBG.ppt.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\axTZwDBeUngqBG.ppt
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\BKEZepJtdwTS.doc.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\BKEZepJtdwTS.doc
newfilepath: C:\Users\test22\Documents\BKEZepJtdwTS.doc.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\BKEZepJtdwTS.doc
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\CJgZNzWBCXYHnBkZq.txt.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\CJgZNzWBCXYHnBkZq.txt
newfilepath: C:\Users\test22\Documents\CJgZNzWBCXYHnBkZq.txt.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\CJgZNzWBCXYHnBkZq.txt
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\cXMLMLMlMJidCP.doc.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\cXMLMLMlMJidCP.doc
newfilepath: C:\Users\test22\Documents\cXMLMLMlMJidCP.doc.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\cXMLMLMlMJidCP.doc
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\EYBTNLbmUPSNwzoitY.rtf.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\EYBTNLbmUPSNwzoitY.rtf
newfilepath: C:\Users\test22\Documents\EYBTNLbmUPSNwzoitY.rtf.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\EYBTNLbmUPSNwzoitY.rtf
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\FAaWoqRZplEQFsGvV.docm.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\FAaWoqRZplEQFsGvV.docm
newfilepath: C:\Users\test22\Documents\FAaWoqRZplEQFsGvV.docm.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\FAaWoqRZplEQFsGvV.docm
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\FOwRatdvSt.docm.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\FOwRatdvSt.docm
newfilepath: C:\Users\test22\Documents\FOwRatdvSt.docm.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\FOwRatdvSt.docm
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\GlUCAtzEAEmoE.docm.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\GlUCAtzEAEmoE.docm
newfilepath: C:\Users\test22\Documents\GlUCAtzEAEmoE.docm.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\GlUCAtzEAEmoE.docm
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\gxeffFGQwhrjD.rtf.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\gxeffFGQwhrjD.rtf
newfilepath: C:\Users\test22\Documents\gxeffFGQwhrjD.rtf.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\gxeffFGQwhrjD.rtf
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\JDHeJjBWHuxqp.doc.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\JDHeJjBWHuxqp.doc
newfilepath: C:\Users\test22\Documents\JDHeJjBWHuxqp.doc.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\JDHeJjBWHuxqp.doc
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\jsGIrPlHsPM.txt.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\jsGIrPlHsPM.txt
newfilepath: C:\Users\test22\Documents\jsGIrPlHsPM.txt.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\jsGIrPlHsPM.txt
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\NsyJVJnTKf.docx.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\NsyJVJnTKf.docx
newfilepath: C:\Users\test22\Documents\NsyJVJnTKf.docx.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\NsyJVJnTKf.docx
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\ONyeiyAHXnG.docx.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\ONyeiyAHXnG.docx
newfilepath: C:\Users\test22\Documents\ONyeiyAHXnG.docx.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\ONyeiyAHXnG.docx
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\oyiUlRmkVDmdx.rtf.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\oyiUlRmkVDmdx.rtf
newfilepath: C:\Users\test22\Documents\oyiUlRmkVDmdx.rtf.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\oyiUlRmkVDmdx.rtf
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\QAXyTXeWuxZprZY.rtf.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\QAXyTXeWuxZprZY.rtf
newfilepath: C:\Users\test22\Documents\QAXyTXeWuxZprZY.rtf.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\QAXyTXeWuxZprZY.rtf
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\qepPpGHizxfbWQe.ppt.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\qepPpGHizxfbWQe.ppt
newfilepath: C:\Users\test22\Documents\qepPpGHizxfbWQe.ppt.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\qepPpGHizxfbWQe.ppt
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\readme.bmp.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\readme.bmp
newfilepath: C:\Users\test22\Documents\readme.bmp.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\readme.bmp
1 1 0

MoveFileWithProgressW

 newfilepath_r: \\?\C:\Users\test22\Documents\readme.c.twSpMDCpB
flags: 8
oldfilepath_r: \\?\C:\Users\test22\Documents\readme.c
newfilepath: C:\Users\test22\Documents\readme.c.twSpMDCpB
oldfilepath: C:\Users\test22\Documents\readme.c
1 1 0