MIME-Version: 1.0
From: pxawele@ambreh.com
To: pxawele@ambreh.com
Date: 14 Nov 2019 11:19:08 +0000
Subject: PX | PSWD | Client Name: admin
Content-Type: multipart/mixed;
 boundary=--boundary_0_966c604f-d09f-442a-a044-7457a8979c5d


----boundary_0_966c604f-d09f-442a-a044-7457a8979c5d
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

|------- Phoenix Keylogger - Passwords -------|
+------------- Client INFO -------------+
IP: 85.203.44.11
HWID: 1F8BFBFF000506E3
Owner Name: DESKTOP-JGLLJLD
Full OS Name: Microsoft Windows 10 Pro
OS Platform: Win32NTOS Version: 10.0.16299.0
System Boot Mode: Normal
Physical Memory: 2
85 GB  Available Of 4.09 GB 
Virtual Memory: 3.86 GB  Available Of 4.09 GB 
Date: 11/14/2019 11:19:05 AM
-----------------------------------------

----boundary_0_966c604f-d09f-442a-a044-7457a8979c5d
Content-Type: application/octet-stream; name="PXRecoveries | 11/14/2019
 11:19:05 AM.txt"
Content-Transfer-Encoding: base64
Content-Disposition: attachment

77u/PT09PT09PT09PT09RmlyZWZveD09PT09PT09PT09PT09DQpIb3N0OiBodHRwczov
L3d3dy5mYWNlYm9vay5jb20NClVzZXJuYW1lOiANClBhc3N3b3JkOiANCj09PT09PT09
PT09PT09PT09PT09PT09PT09PT09DQog
----boundary_0_966c604f-d09f-442a-a044-7457a8979c5d--


----------------------------------

decoded base64 attachment:

.============Firefox==============
Host: https://www.facebook.com
Username: 
Password: 
=============================