{
  "xor_key_hex": "a73c115ed29b4807f16abe20c459832d71e8940b36cd52af1867da259e407b13",
  "certificates_decrypted": 135,
  "files_reassembled": 15,
  "complete_files": 15,
  "incomplete_files": 0,
  "magic_counts": {
    "PDF": 7,
    "JPEG": 5,
    "PNG": 2,
    "UTF-16LE text": 1
  },
  "files": [
    {
      "recovered_filename": "CONTRACT_NTA-BWL_SILENTRUN_779A_SIGNED.pdf",
      "original_path": "c:\\Users\\public\\Documents\\CONTRACT_NTA-BWL_SILENTRUN_779A_SIGNED.pdf",
      "stored_name": "VICTIM_4d9757e0_1765330463_CONTRACT_NTA-BWL_SILENTRUN_779A_SIGNED.pdf",
      "file_size": 58962,
      "chunks_present": 4,
      "chunks_expected": 4,
      "complete": true,
      "missing_bytes": 0,
      "sha256": "432ec9f7b4e5bb68521aafea2f35454596efe04216794e6745b80b0e0ea7acbc",
      "magic": "PDF",
      "cert_indices": "16;14;20;18",
      "issues": ""
    },
    {
      "recovered_filename": "EXEC-BRIEFING-CYBERTHREAT-2026Q1.pdf",
      "original_path": "c:\\Users\\public\\Documents\\EXEC-BRIEFING-CYBERTHREAT-2026Q1.pdf",
      "stored_name": "VICTIM_4d9757e0_1765330463_EXEC-BRIEFING-CYBERTHREAT-2026Q1.pdf",
      "file_size": 33496,
      "chunks_present": 3,
      "chunks_expected": 3,
      "complete": true,
      "missing_bytes": 0,
      "sha256": "8170ba9789d546ec6655d9efeae5f04c64a6d32db27aaf1729020c3473591dec",
      "magic": "PDF",
      "cert_indices": "24;26;28",
      "issues": ""
    },
    {
      "recovered_filename": "INTERNAL-AUDIT-FRAUD-INVESTIGATION-2025 (1).pdf",
      "original_path": "c:\\Users\\public\\Documents\\INTERNAL-AUDIT-FRAUD-INVESTIGATION-2025 (1).pdf",
      "stored_name": "VICTIM_4d9757e0_1765330463_INTERNAL-AUDIT-FRAUD-INVESTIGATION-2025 (1).pdf",
      "file_size": 33978,
      "chunks_present": 3,
      "chunks_expected": 3,
      "complete": true,
      "missing_bytes": 0,
      "sha256": "e06f3e5e48fbc76f944a24cfe1684e01f288129b6ec372876033d54670698f19",
      "magic": "PDF",
      "cert_indices": "39;38;42",
      "issues": ""
    },
    {
      "recovered_filename": "INTERNAL-AUDIT-FRAUD-INVESTIGATION-2025.pdf",
      "original_path": "c:\\Users\\public\\Documents\\INTERNAL-AUDIT-FRAUD-INVESTIGATION-2025.pdf",
      "stored_name": "VICTIM_4d9757e0_1765330464_INTERNAL-AUDIT-FRAUD-INVESTIGATION-2025.pdf",
      "file_size": 33978,
      "chunks_present": 3,
      "chunks_expected": 3,
      "complete": true,
      "missing_bytes": 0,
      "sha256": "e06f3e5e48fbc76f944a24cfe1684e01f288129b6ec372876033d54670698f19",
      "magic": "PDF",
      "cert_indices": "44;46;48",
      "issues": ""
    },
    {
      "recovered_filename": "Internal Designs.jpg",
      "original_path": "c:\\Users\\public\\Documents\\Internal Designs.jpg",
      "stored_name": "VICTIM_4d9757e0_1765330463_Internal Designs.jpg",
      "file_size": 52255,
      "chunks_present": 4,
      "chunks_expected": 4,
      "complete": true,
      "missing_bytes": 0,
      "sha256": "b9958ee3b4e2ddf008def98aa8ca0f249ed74685360d2de70978e0e9523b7534",
      "magic": "JPEG",
      "cert_indices": "30;32;34;36",
      "issues": ""
    },
    {
      "recovered_filename": "MASTER_PLAN_COBRA_TEXTOPS.pdf",
      "original_path": "c:\\Users\\public\\Documents\\MASTER_PLAN_COBRA_TEXTOPS.pdf",
      "stored_name": "VICTIM_4d9757e0_1765330464_MASTER_PLAN_COBRA_TEXTOPS.pdf",
      "file_size": 31260,
      "chunks_present": 2,
      "chunks_expected": 2,
      "complete": true,
      "missing_bytes": 0,
      "sha256": "2276cc7e582c6577f8faed52eb83bdb2ba057a447b4a820389d4bac15699a739",
      "magic": "PDF",
      "cert_indices": "60;62",
      "issues": ""
    },
    {
      "recovered_filename": "SIG-SEC-88B_Central-Line-ATP-Config_v4.2.pdf",
      "original_path": "c:\\Users\\public\\Documents\\SIG-SEC-88B_Central-Line-ATP-Config_v4.2.pdf",
      "stored_name": "VICTIM_4d9757e0_1765330464_SIG-SEC-88B_Central-Line-ATP-Config_v4.2.pdf",
      "file_size": 67535,
      "chunks_present": 5,
      "chunks_expected": 5,
      "complete": true,
      "missing_bytes": 0,
      "sha256": "0249828a119e64283a445ad5ad92d8b3d0032300da496e0ec45789d12953ff98",
      "magic": "PDF",
      "cert_indices": "64;65;69;68;72",
      "issues": ""
    },
    {
      "recovered_filename": "Ticketing Class Diagram.png",
      "original_path": "c:\\Users\\public\\Documents\\Ticketing Class Diagram.png",
      "stored_name": "VICTIM_4d9757e0_1765330469_Ticketing Class Diagram.png",
      "file_size": 114085,
      "chunks_present": 7,
      "chunks_expected": 7,
      "complete": true,
      "missing_bytes": 0,
      "sha256": "c39a0fb24a095063153827a060f47d8be02f52a314dcb0e859c6f2eb52678b46",
      "magic": "PNG",
      "cert_indices": "218;220;222;223;226;228;230",
      "issues": ""
    },
    {
      "recovered_filename": "Tracks1-3876859602.jpg",
      "original_path": "c:\\Users\\public\\Documents\\Tracks1-3876859602.jpg",
      "stored_name": "VICTIM_4d9757e0_1765330470_Tracks1-3876859602.jpg",
      "file_size": 208995,
      "chunks_present": 13,
      "chunks_expected": 13,
      "complete": true,
      "missing_bytes": 0,
      "sha256": "ef86072d0b772140ba953c9183bf49b5d7f416e1b630a7413ea46fe74604ee3d",
      "magic": "JPEG",
      "cert_indices": "232;233;236;238;240;242;244;246;249;248;252;254;256",
      "issues": ""
    },
    {
      "recovered_filename": "VENDOR-CONTRACT-NORDSTADT-SIGNALS-AG_FULL.pdf",
      "original_path": "c:\\Users\\public\\Documents\\VENDOR-CONTRACT-NORDSTADT-SIGNALS-AG_FULL.pdf",
      "stored_name": "VICTIM_4d9757e0_1765330471_VENDOR-CONTRACT-NORDSTADT-SIGNALS-AG_FULL.pdf",
      "file_size": 36400,
      "chunks_present": 3,
      "chunks_expected": 3,
      "complete": true,
      "missing_bytes": 0,
      "sha256": "711b6aad7ae5aaf9f9054e65bd8a170578ce2628db20f979084463d6e80a7b40",
      "magic": "PDF",
      "cert_indices": "278;280;282",
      "issues": ""
    },
    {
      "recovered_filename": "desktop.ini",
      "original_path": "c:\\Users\\public\\Documents\\desktop.ini",
      "stored_name": "VICTIM_4d9757e0_1765330463_desktop.ini",
      "file_size": 278,
      "chunks_present": 1,
      "chunks_expected": 1,
      "complete": true,
      "missing_bytes": 0,
      "sha256": "b18f9a899844d82f60ff3a1ab7fc9efc4a7297d78c04bcda65362b7bce2c02a8",
      "magic": "UTF-16LE text",
      "cert_indices": "22",
      "issues": ""
    },
    {
      "recovered_filename": "lift-station-wiring-diagram.jpg",
      "original_path": "c:\\Users\\public\\Documents\\lift-station-wiring-diagram.jpg",
      "stored_name": "VICTIM_4d9757e0_1765330464_lift-station-wiring-diagram.jpg",
      "file_size": 75757,
      "chunks_present": 5,
      "chunks_expected": 5,
      "complete": true,
      "missing_bytes": 0,
      "sha256": "89303b7c949ff00ff1a1e1760641c51e8307541447c29f55bdd6cefa560d627e",
      "magic": "JPEG",
      "cert_indices": "50;51;54;55;58",
      "issues": ""
    },
    {
      "recovered_filename": "signalling-SSI.jpg",
      "original_path": "c:\\Users\\public\\Documents\\signalling-SSI.jpg",
      "stored_name": "VICTIM_4d9757e0_1765330465_signalling-SSI.jpg",
      "file_size": 84271,
      "chunks_present": 6,
      "chunks_expected": 6,
      "complete": true,
      "missing_bytes": 0,
      "sha256": "16b758f96dc9082e72e47edb23e10f3826aafc6daa032a15ee12c467af9d325c",
      "magic": "JPEG",
      "cert_indices": "74;76;78;80;82;84",
      "issues": ""
    },
    {
      "recovered_filename": "signalling-system-design.png",
      "original_path": "c:\\Users\\public\\Documents\\signalling-system-design.png",
      "stored_name": "VICTIM_4d9757e0_1765330465_signalling-system-design.png",
      "file_size": 1078458,
      "chunks_present": 66,
      "chunks_expected": 66,
      "complete": true,
      "missing_bytes": 0,
      "sha256": "6e361033ed743d5d81c63a04e6865c185698971d384e87f2740ef42902f1ec34",
      "magic": "PNG",
      "cert_indices": "88;86;92;90;96;94;98;100;102;103;106;107;110;112;114;115;118;120;124;122;128;126;130;132;134;136;139;138;144;142;146;148;152;150;154;156;158;159;162;164;166;168;171;170;174;175;178;180;182;184;187;186;190;192;196;194;199;198;204;202;206;208;211;210;214;216",
      "issues": ""
    },
    {
      "recovered_filename": "trainDiagram-Denver-RTD.jpeg",
      "original_path": "c:\\Users\\public\\Documents\\trainDiagram-Denver-RTD.jpeg",
      "stored_name": "VICTIM_4d9757e0_1765330471_trainDiagram-Denver-RTD.jpeg",
      "file_size": 149919,
      "chunks_present": 10,
      "chunks_expected": 10,
      "complete": true,
      "missing_bytes": 0,
      "sha256": "08e6d4d69179566aab836b9427bed18616f3f2fcbcecb6cdbcdb81d5d2e4954d",
      "magic": "JPEG",
      "cert_indices": "260;258;263;262;266;268;271;270;274;276",
      "issues": ""
    }
  ]
}