Detections

Behavior:

Neshta

Analysis

Category Package Started Completed Duration Options Log
FILE exe 2020-09-02 22:09:36 2020-09-02 22:15:46 370 seconds Show Options Show Log
route = USA - Chicago.ovpn
2020-05-13 09:25:38,852 [root] INFO: Date set to: 20200902T22:09:36, timeout set to: 300
2020-09-02 22:09:36,046 [root] DEBUG: Starting analyzer from: C:\tmp2ssujfce
2020-09-02 22:09:36,046 [root] DEBUG: Storing results at: C:\TlGzllHozu
2020-09-02 22:09:36,046 [root] DEBUG: Pipe server name: \\.\PIPE\PkdwMugA
2020-09-02 22:09:36,046 [root] DEBUG: Python path: C:\Users\Louise\AppData\Local\Programs\Python\Python38-32
2020-09-02 22:09:36,046 [root] DEBUG: No analysis package specified, trying to detect it automagically.
2020-09-02 22:09:36,046 [root] INFO: Automatically selected analysis package "exe"
2020-09-02 22:09:36,046 [root] DEBUG: Trying to import analysis package "exe"...
2020-09-02 22:09:36,156 [root] DEBUG: Imported analysis package "exe".
2020-09-02 22:09:36,156 [root] DEBUG: Trying to initialize analysis package "exe"...
2020-09-02 22:09:36,156 [root] DEBUG: Initialized analysis package "exe".
2020-09-02 22:09:36,265 [root] DEBUG: Trying to import auxiliary module "modules.auxiliary.browser"...
2020-09-02 22:09:36,265 [root] DEBUG: Imported auxiliary module "modules.auxiliary.browser".
2020-09-02 22:09:36,265 [root] DEBUG: Trying to import auxiliary module "modules.auxiliary.curtain"...
2020-09-02 22:09:36,281 [root] DEBUG: Imported auxiliary module "modules.auxiliary.curtain".
2020-09-02 22:09:36,281 [root] DEBUG: Trying to import auxiliary module "modules.auxiliary.digisig"...
2020-09-02 22:09:36,296 [root] DEBUG: Imported auxiliary module "modules.auxiliary.digisig".
2020-09-02 22:09:36,296 [root] DEBUG: Trying to import auxiliary module "modules.auxiliary.disguise"...
2020-09-02 22:09:36,484 [root] DEBUG: Imported auxiliary module "modules.auxiliary.disguise".
2020-09-02 22:09:36,500 [root] DEBUG: Trying to import auxiliary module "modules.auxiliary.human"...
2020-09-02 22:09:36,750 [root] DEBUG: Imported auxiliary module "modules.auxiliary.human".
2020-09-02 22:09:36,750 [root] DEBUG: Trying to import auxiliary module "modules.auxiliary.procmon"...
2020-09-02 22:09:36,765 [root] DEBUG: Imported auxiliary module "modules.auxiliary.procmon".
2020-09-02 22:09:36,765 [root] DEBUG: Trying to import auxiliary module "modules.auxiliary.screenshots"...
2020-09-02 22:09:36,765 [modules.auxiliary.screenshots] DEBUG: Importing 'time'
2020-09-02 22:09:36,765 [modules.auxiliary.screenshots] DEBUG: Importing 'StringIO'
2020-09-02 22:09:36,765 [modules.auxiliary.screenshots] DEBUG: Importing 'Thread'
2020-09-02 22:09:36,765 [modules.auxiliary.screenshots] DEBUG: Importing 'Auxiliary'
2020-09-02 22:09:36,765 [modules.auxiliary.screenshots] DEBUG: Importing 'NetlogFile'
2020-09-02 22:09:36,765 [modules.auxiliary.screenshots] DEBUG: Importing 'Screenshot'
2020-09-02 22:09:37,000 [lib.api.screenshot] DEBUG: Importing 'math'
2020-09-02 22:09:37,000 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageChops'
2020-09-02 22:09:37,937 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageGrab'
2020-09-02 22:09:37,968 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageDraw'
2020-09-02 22:09:38,000 [modules.auxiliary.screenshots] DEBUG: Imports OK
2020-09-02 22:09:38,000 [root] DEBUG: Imported auxiliary module "modules.auxiliary.screenshots".
2020-09-02 22:09:38,000 [root] DEBUG: Trying to import auxiliary module "modules.auxiliary.sysmon"...
2020-09-02 22:09:38,000 [root] DEBUG: Imported auxiliary module "modules.auxiliary.sysmon".
2020-09-02 22:09:38,015 [root] DEBUG: Trying to import auxiliary module "modules.auxiliary.usage"...
2020-09-02 22:09:38,015 [root] DEBUG: Imported auxiliary module "modules.auxiliary.usage".
2020-09-02 22:09:38,015 [root] DEBUG: Trying to initialize auxiliary module "Browser"...
2020-09-02 22:09:38,015 [root] DEBUG: Initialized auxiliary module "Browser".
2020-09-02 22:09:38,015 [root] DEBUG: Trying to start auxiliary module "Browser"...
2020-09-02 22:09:38,046 [root] DEBUG: Started auxiliary module Browser
2020-09-02 22:09:38,046 [root] DEBUG: Trying to initialize auxiliary module "Curtain"...
2020-09-02 22:09:38,046 [root] DEBUG: Initialized auxiliary module "Curtain".
2020-09-02 22:09:38,046 [root] DEBUG: Trying to start auxiliary module "Curtain"...
2020-09-02 22:09:38,046 [root] DEBUG: Started auxiliary module Curtain
2020-09-02 22:09:38,046 [root] DEBUG: Trying to initialize auxiliary module "DigiSig"...
2020-09-02 22:09:38,046 [root] DEBUG: Initialized auxiliary module "DigiSig".
2020-09-02 22:09:38,046 [root] DEBUG: Trying to start auxiliary module "DigiSig"...
2020-09-02 22:09:38,046 [modules.auxiliary.digisig] DEBUG: Checking for a digital signature.
2020-09-02 22:09:39,140 [modules.auxiliary.digisig] DEBUG: File is not signed.
2020-09-02 22:09:39,140 [modules.auxiliary.digisig] INFO: Uploading signature results to aux/DigiSig.json
2020-09-02 22:09:39,140 [root] DEBUG: Started auxiliary module DigiSig
2020-09-02 22:09:39,140 [root] DEBUG: Trying to initialize auxiliary module "Disguise"...
2020-09-02 22:09:39,140 [root] DEBUG: Initialized auxiliary module "Disguise".
2020-09-02 22:09:39,140 [root] DEBUG: Trying to start auxiliary module "Disguise"...
2020-09-02 22:09:39,171 [modules.auxiliary.disguise] INFO: Disguising GUID to 06afb245-3487-49b5-9ba8-a86e629b8974
2020-09-02 22:09:39,171 [root] DEBUG: Started auxiliary module Disguise
2020-09-02 22:09:39,171 [root] DEBUG: Trying to initialize auxiliary module "Human"...
2020-09-02 22:09:39,171 [root] DEBUG: Initialized auxiliary module "Human".
2020-09-02 22:09:39,171 [root] DEBUG: Trying to start auxiliary module "Human"...
2020-09-02 22:09:39,171 [root] DEBUG: Started auxiliary module Human
2020-09-02 22:09:39,171 [root] DEBUG: Trying to initialize auxiliary module "Procmon"...
2020-09-02 22:09:39,171 [root] DEBUG: Initialized auxiliary module "Procmon".
2020-09-02 22:09:39,171 [root] DEBUG: Trying to start auxiliary module "Procmon"...
2020-09-02 22:09:39,218 [root] DEBUG: Started auxiliary module Procmon
2020-09-02 22:09:39,218 [root] DEBUG: Trying to initialize auxiliary module "Screenshots"...
2020-09-02 22:09:39,218 [root] DEBUG: Initialized auxiliary module "Screenshots".
2020-09-02 22:09:39,218 [root] DEBUG: Trying to start auxiliary module "Screenshots"...
2020-09-02 22:09:39,218 [root] DEBUG: Started auxiliary module Screenshots
2020-09-02 22:09:39,218 [root] DEBUG: Trying to initialize auxiliary module "Sysmon"...
2020-09-02 22:09:39,218 [root] DEBUG: Initialized auxiliary module "Sysmon".
2020-09-02 22:09:39,234 [root] DEBUG: Trying to start auxiliary module "Sysmon"...
2020-09-02 22:09:39,281 [root] DEBUG: Started auxiliary module Sysmon
2020-09-02 22:09:39,281 [root] DEBUG: Trying to initialize auxiliary module "Usage"...
2020-09-02 22:09:39,281 [root] DEBUG: Initialized auxiliary module "Usage".
2020-09-02 22:09:39,281 [root] DEBUG: Trying to start auxiliary module "Usage"...
2020-09-02 22:09:39,281 [root] DEBUG: Started auxiliary module Usage
2020-09-02 22:09:39,281 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL option
2020-09-02 22:09:39,281 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL_64 option
2020-09-02 22:09:39,281 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader option
2020-09-02 22:09:39,281 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader_64 option
2020-09-02 22:09:39,453 [lib.api.process] INFO: Successfully executed process from path "C:\Users\Louise\AppData\Local\Temp\c37.exe" with arguments "" with pid 4580
2020-09-02 22:09:39,453 [lib.api.process] INFO: Monitor config for process 4580: C:\tmp2ssujfce\dll\4580.ini
2020-09-02 22:09:39,468 [lib.api.process] INFO: 32-bit DLL to inject is C:\tmp2ssujfce\dll\nDdEbvRI.dll, loader C:\tmp2ssujfce\bin\RnNUhrr.exe
2020-09-02 22:09:39,578 [root] DEBUG: ReadConfig: Successfully loaded pipe name \\.\PIPE\PkdwMugA.
2020-09-02 22:09:39,578 [root] DEBUG: Loader: Injecting process 4580 (thread 4200) with C:\tmp2ssujfce\dll\nDdEbvRI.dll.
2020-09-02 22:09:39,578 [root] DEBUG: Process image base: 0x00400000
2020-09-02 22:09:39,578 [root] DEBUG: InjectDllViaIAT: IAT patching with dll name C:\tmp2ssujfce\dll\nDdEbvRI.dll.
2020-09-02 22:09:39,593 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2020-09-02 22:09:39,593 [root] DEBUG: Successfully injected DLL C:\tmp2ssujfce\dll\nDdEbvRI.dll.
2020-09-02 22:09:39,609 [lib.api.process] INFO: Injected into suspended 32-bit process with pid 4580
2020-09-02 22:09:41,609 [lib.api.process] INFO: Successfully resumed process with pid 4580
2020-09-02 22:09:41,796 [root] DEBUG: Python path set to 'C:\Users\Louise\AppData\Local\Programs\Python\Python38-32'.
2020-09-02 22:09:41,796 [root] DEBUG: Dropped file limit defaulting to 100.
2020-09-02 22:09:41,796 [root] DEBUG: RestoreHeaders: Restored original import table.
2020-09-02 22:09:41,812 [root] DEBUG: CAPE initialised: 32-bit monitor loaded in process 4580 at 0x703d0000, image base 0x400000, stack from 0x186000-0x190000
2020-09-02 22:09:41,812 [root] DEBUG: Commandline: C:\Users\Louise\AppData\Local\Temp\"C:\Users\Louise\AppData\Local\Temp\c37.exe".
2020-09-02 22:09:41,859 [root] INFO: Loaded monitor into process with pid 4580
2020-09-02 22:09:41,859 [root] INFO: Disabling sleep skipping.
2020-09-02 22:09:41,859 [root] INFO: Disabling sleep skipping.
2020-09-02 22:09:41,859 [root] DEBUG: set_caller_info: Adding region at 0x00090000 to caller regions list (ntdll::NtReadFile).
2020-09-02 22:09:41,875 [root] INFO: Disabling sleep skipping.
2020-09-02 22:09:41,875 [root] DEBUG: set_caller_info: Adding region at 0x01CD0000 to caller regions list (ntdll::RtlDispatchException).
2020-09-02 22:09:41,875 [root] INFO: Disabling sleep skipping.
2020-09-02 22:09:41,968 [root] DEBUG: DumpMemory: Exception occured reading memory address 0x1cd0000
2020-09-02 22:09:41,968 [root] DEBUG: ScanForDisguisedPE: No PE image located in range 0x1cd0000-0x1cd1000.
2020-09-02 22:09:42,062 [root] DEBUG: DumpMemory: CAPE output file successfully created: C:\TlGzllHozu\CAPE\4580_1858619992412973492020 (size 0xfff)
2020-09-02 22:09:42,062 [root] DEBUG: DumpRegion: Dumped base address 0x01CD0000, size 0x1000.
2020-09-02 22:09:42,093 [root] DEBUG: set_caller_info: Adding region at 0x034E0000 to caller regions list (ntdll::NtReadFile).
2020-09-02 22:09:42,187 [root] DEBUG: ScanForNonZero: Exception occured reading memory address 0x35e0000
2020-09-02 22:09:42,187 [root] DEBUG: DumpMemory: Nothing to dump at 0x034E0000!
2020-09-02 22:09:42,187 [root] DEBUG: DumpRegion: Failed to dump entire allocation from 0x034E0000 size 0x100000.
2020-09-02 22:09:42,187 [root] DEBUG: DumpPEsInRange: Scanning range 0x34e0000 - 0x353c000.
2020-09-02 22:09:42,203 [root] DEBUG: ScanForDisguisedPE: No PE image located in range 0x34e0000-0x353c000.
2020-09-02 22:09:42,234 [root] DEBUG: DumpMemory: CAPE output file successfully created: C:\TlGzllHozu\CAPE\4580_136304735422973492020 (size 0x5c000)
2020-09-02 22:09:42,234 [root] DEBUG: DumpRegion: Dumped base address 0x034E0000, size 0x5c000.
2020-09-02 22:09:42,249 [root] INFO: Added new file to list with pid None and path C:\Users\Louise\AppData\Local\Temp\3582-490\c37.exe
2020-09-02 22:09:42,249 [root] DEBUG: MapSectionViewHandler: Added section view with handle 0xc4 and local view 0x039F0000 to global list.
2020-09-02 22:09:42,265 [root] DEBUG: DLL loaded at 0x6FA20000: C:\Windows\system32\PROPSYS (0xf5000 bytes).
2020-09-02 22:09:42,265 [root] DEBUG: DLL loaded at 0x73A10000: C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32 (0x19e000 bytes).
2020-09-02 22:09:42,281 [root] DEBUG: DLL loaded at 0x76170000: C:\Windows\syswow64\CLBCatQ (0x83000 bytes).
2020-09-02 22:09:42,281 [root] DEBUG: DLL loaded at 0x74380000: C:\Windows\system32\ntmarta (0x21000 bytes).
2020-09-02 22:09:42,281 [root] DEBUG: DLL loaded at 0x76E50000: C:\Windows\syswow64\WLDAP32 (0x45000 bytes).
2020-09-02 22:09:42,296 [root] DEBUG: DLL loaded at 0x74440000: C:\Windows\system32\profapi (0xb000 bytes).
2020-09-02 22:09:42,312 [root] DEBUG: DLL loaded at 0x74CD0000: C:\Windows\system32\apphelp (0x4c000 bytes).
2020-09-02 22:09:42,390 [root] DEBUG: DLL loaded at 0x70370000: C:\Windows\System32\shdocvw (0x2f000 bytes).
2020-09-02 22:09:42,406 [root] DEBUG: DLL loaded at 0x76800000: C:\Windows\syswow64\SETUPAPI (0x19d000 bytes).
2020-09-02 22:09:42,406 [root] DEBUG: DLL loaded at 0x76200000: C:\Windows\syswow64\CFGMGR32 (0x27000 bytes).
2020-09-02 22:09:42,406 [root] DEBUG: DLL loaded at 0x76EC0000: C:\Windows\syswow64\DEVOBJ (0x12000 bytes).
2020-09-02 22:09:42,421 [root] DEBUG: DLL loaded at 0x75B90000: C:\Windows\SysWOW64\urlmon (0x124000 bytes).
2020-09-02 22:09:42,421 [root] DEBUG: DLL loaded at 0x76EB0000: C:\Windows\syswow64\api-ms-win-downlevel-ole32-l1-1-0 (0x4000 bytes).
2020-09-02 22:09:42,421 [root] DEBUG: DLL loaded at 0x74E90000: C:\Windows\syswow64\api-ms-win-downlevel-shlwapi-l1-1-0 (0x4000 bytes).
2020-09-02 22:09:42,437 [root] DEBUG: DLL loaded at 0x76EF0000: C:\Windows\syswow64\api-ms-win-downlevel-advapi32-l1-1-0 (0x5000 bytes).
2020-09-02 22:09:42,437 [root] DEBUG: DLL loaded at 0x76E40000: C:\Windows\syswow64\api-ms-win-downlevel-user32-l1-1-0 (0x4000 bytes).
2020-09-02 22:09:42,437 [root] DEBUG: DLL loaded at 0x76EE0000: C:\Windows\syswow64\api-ms-win-downlevel-version-l1-1-0 (0x4000 bytes).
2020-09-02 22:09:42,437 [root] DEBUG: DLL loaded at 0x73590000: C:\Windows\system32\version (0x9000 bytes).
2020-09-02 22:09:42,468 [root] DEBUG: DLL loaded at 0x767F0000: C:\Windows\syswow64\api-ms-win-downlevel-normaliz-l1-1-0 (0x3000 bytes).
2020-09-02 22:09:42,468 [root] DEBUG: DLL loaded at 0x766F0000: C:\Windows\syswow64\normaliz (0x3000 bytes).
2020-09-02 22:09:42,468 [root] DEBUG: DLL loaded at 0x76BA0000: C:\Windows\syswow64\iertutil (0x215000 bytes).
2020-09-02 22:09:42,640 [root] DEBUG: DLL loaded at 0x75CC0000: C:\Windows\syswow64\WININET (0x1c4000 bytes).
2020-09-02 22:09:42,640 [root] DEBUG: DLL loaded at 0x73230000: C:\Windows\system32\Secur32 (0x8000 bytes).
2020-09-02 22:09:42,656 [root] DEBUG: DLL unloaded from 0x74F40000.
2020-09-02 22:09:42,656 [root] DEBUG: DLL loaded at 0x72DF0000: C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0 (0x4000 bytes).
2020-09-02 22:09:42,875 [root] INFO: Announced 64-bit process name: c37.exe pid: 4696
2020-09-02 22:09:42,875 [lib.api.process] INFO: Monitor config for process 4696: C:\tmp2ssujfce\dll\4696.ini
2020-09-02 22:09:42,875 [lib.api.process] INFO: 64-bit DLL to inject is C:\tmp2ssujfce\dll\mxPulz.dll, loader C:\tmp2ssujfce\bin\yawucYjz.exe
2020-09-02 22:09:43,109 [root] DEBUG: ReadConfig: Successfully loaded pipe name \\.\PIPE\PkdwMugA.
2020-09-02 22:09:43,109 [root] DEBUG: Loader: Injecting process 4696 (thread 3500) with C:\tmp2ssujfce\dll\mxPulz.dll.
2020-09-02 22:09:43,109 [root] DEBUG: Process image base: 0x000000013F980000
2020-09-02 22:09:43,109 [root] DEBUG: InjectDllViaIAT: IAT patching with dll name C:\tmp2ssujfce\dll\mxPulz.dll.
2020-09-02 22:09:43,109 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2020-09-02 22:09:43,109 [root] DEBUG: Successfully injected DLL C:\tmp2ssujfce\dll\mxPulz.dll.
2020-09-02 22:09:43,125 [lib.api.process] INFO: Injected into suspended 64-bit process with pid 4696
2020-09-02 22:09:43,140 [root] DEBUG: CreateProcessHandler: Injection info set for new process 4696, ImageBase: 0x3F980000
2020-09-02 22:09:43,140 [root] DEBUG: DLL unloaded from 0x75B90000.
2020-09-02 22:09:43,187 [root] DEBUG: DLL unloaded from 0x74F40000.
2020-09-02 22:09:43,187 [root] DEBUG: DLL unloaded from 0x70370000.
2020-09-02 22:09:43,203 [root] DEBUG: DLL unloaded from 0x6FA20000.
2020-09-02 22:09:43,421 [root] INFO: Added new file to list with pid None and path C:\Windows\svchost.com
2020-09-02 22:09:43,421 [root] DEBUG: Python path set to 'C:\Users\Louise\AppData\Local\Programs\Python\Python38-32'.
2020-09-02 22:09:43,421 [root] DEBUG: Dropped file limit defaulting to 100.
2020-09-02 22:09:43,671 [root] INFO: Disabling sleep skipping.
2020-09-02 22:09:43,671 [root] DEBUG: RestoreHeaders: Restored original import table.
2020-09-02 22:09:43,671 [root] DEBUG: CAPE initialised: 64-bit monitor loaded in process 4696 at 0x000007FEEF640000, image base 0x000000013F980000, stack from 0x00000000002A6000-0x00000000002B0000
2020-09-02 22:09:43,671 [root] DEBUG: Commandline: C:\Users\Louise\AppData\Local\Temp\"C:\Users\Louise\AppData\Local\Temp\3582-490\c37.exe".
2020-09-02 22:09:43,750 [root] WARNING: b'Unable to place hook on LockResource'
2020-09-02 22:09:43,765 [root] WARNING: b'Unable to hook LockResource'
2020-09-02 22:09:43,781 [root] INFO: Loaded monitor into process with pid 4696
2020-09-02 22:09:43,812 [root] DEBUG: DLL loaded at 0x00000000FFD90000: C:\Windows\system32\schtasks.exe (0x48000 bytes).
2020-09-02 22:09:43,843 [root] DEBUG: MapSectionViewHandler: Added section view with handle 0x228 and local view 0x2D520000 to global list.
2020-09-02 22:09:43,890 [root] DEBUG: api-rate-cap: GetSystemTimeAsFileTime hook disabled.
2020-09-02 22:09:43,890 [root] INFO: Added new file to list with pid None and path C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\ose.exe
2020-09-02 22:09:43,937 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D1F0000 for section view with handle 0x228.
2020-09-02 22:09:44,000 [root] INFO: Added new file to list with pid None and path C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\setup.exe
2020-09-02 22:09:44,125 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D200000 for section view with handle 0x228.
2020-09-02 22:09:44,140 [root] INFO: Added new file to list with pid None and path C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\DW20.EXE
2020-09-02 22:09:44,171 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D350000 for section view with handle 0x228.
2020-09-02 22:09:44,203 [root] INFO: Added new file to list with pid None and path C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\dwtrig20.exe
2020-09-02 22:09:47,015 [root] DEBUG: set_caller_info: Adding region at 0x0000000000320000 to caller regions list (ntdll::NtQuerySystemInformation).
2020-09-02 22:09:47,015 [root] DEBUG: DLL loaded at 0x000007FEFCE10000: C:\Windows\system32\cryptbase (0xf000 bytes).
2020-09-02 22:09:47,078 [root] DEBUG: DumpMemory: CAPE output file successfully created: C:\TlGzllHozu\CAPE\4696_40278652847943492020 (size 0x49011)
2020-09-02 22:09:47,093 [root] DEBUG: DumpRegion: Dumped entire allocation from 0x0000000000320000, size 0x4a000.
2020-09-02 22:09:47,093 [root] DEBUG: set_caller_info: Adding region at 0x0000000000370000 to caller regions list (ntdll::LdrLoadDll).
2020-09-02 22:09:47,093 [root] DEBUG: DumpImageInCurrentProcess: Attempting to dump virtual PE image.
2020-09-02 22:09:47,093 [root] DEBUG: DumpProcess: Instantiating PeParser with address: 0x0000000000370000.
2020-09-02 22:09:47,093 [root] DEBUG: DumpProcess: Module entry point VA is 0x0000000000001000.
2020-09-02 22:09:47,109 [root] DEBUG: readPeSectionsFromProcess: Failed to relocate image back to header image base 0x0000000180000000.
2020-09-02 22:09:47,156 [root] DEBUG: DumpProcess: Module image dump success - dump size 0x48a00.
2020-09-02 22:09:47,156 [root] DEBUG: set_caller_info: Adding region at 0x00000000001B0000 to caller regions list (ntdll::NtQuerySystemInformation).
2020-09-02 22:09:47,171 [root] DEBUG: DumpImageInCurrentProcess: Attempting to dump 'raw' PE image.
2020-09-02 22:09:47,171 [root] DEBUG: DumpPE: Instantiating PeParser with address: 0x00000000001B0000.
2020-09-02 22:09:47,171 [root] DEBUG: DumpPE: Error: Invalid PE file or invalid PE header.
2020-09-02 22:09:47,171 [root] DEBUG: DumpImageInCurrentProcess: Failed to dump 'raw' PE image from 0x00000000001B0000, dumping memory region.
2020-09-02 22:09:47,171 [root] DEBUG: set_caller_info: Adding region at 0x000000006BAC0000 to caller regions list (ntdll::NtAllocateVirtualMemory).
2020-09-02 22:09:47,171 [root] DEBUG: DumpMemory: Nothing to dump at 0x000000006BAC0000!
2020-09-02 22:09:47,171 [root] DEBUG: DumpRegion: Failed to dump entire allocation from 0x000000006BAC0000 size 0x4f000.
2020-09-02 22:09:47,187 [root] DEBUG: DumpPEsInRange: Scanning range 0x6bac0000 - 0x6bb0f000.
2020-09-02 22:09:47,187 [root] DEBUG: ScanForDisguisedPE: No PE image located in range 0x6bac0000-0x6bb0f000.
2020-09-02 22:09:47,187 [root] DEBUG: DumpMemory: Nothing to dump at 0x000000006BAC0000!
2020-09-02 22:09:47,187 [root] DEBUG: DumpRegion: Failed to dump base address 0x000000006BAC0000 size 0x4f000.
2020-09-02 22:09:47,203 [root] DEBUG: set_caller_info: Adding region at 0x0000000000080000 to caller regions list (kernel32::VirtualProtectEx).
2020-09-02 22:09:47,203 [root] DEBUG: ScanForNonZero: Exception occured reading memory address 0x180000
2020-09-02 22:09:47,203 [root] DEBUG: DumpMemory: Nothing to dump at 0x0000000000080000!
2020-09-02 22:09:47,203 [root] DEBUG: DumpRegion: Failed to dump entire allocation from 0x0000000000080000 size 0x100000.
2020-09-02 22:09:47,203 [root] DEBUG: DumpPEsInRange: Scanning range 0x80000 - 0x11c000.
2020-09-02 22:09:47,218 [root] DEBUG: ScanForDisguisedPE: PE image located at: 0xd35e0
2020-09-02 22:09:47,218 [root] DEBUG: DumpImageInCurrentProcess: Attempting to dump 'raw' PE image.
2020-09-02 22:09:47,218 [root] DEBUG: DumpPE: Instantiating PeParser with address: 0x00000000000D35E0.
2020-09-02 22:09:47,249 [root] DEBUG: DumpPE: PE file in memory dumped successfully - dump size 0x46400.
2020-09-02 22:09:47,265 [root] DEBUG: ScanForDisguisedPE: No PE image located in range 0xd45e0-0x11c000.
2020-09-02 22:09:47,265 [root] DEBUG: DumpRegion: Dumped PE image(s) from base address 0x0000000000080000, size 0x9c000.
2020-09-02 22:09:47,265 [root] DEBUG: set_caller_info: Adding region at 0x0000000000420000 to caller regions list (ntdll::NtDelayExecution).
2020-09-02 22:09:47,265 [root] DEBUG: ScanForNonZero: Exception occured reading memory address 0x520000
2020-09-02 22:09:47,265 [root] DEBUG: DumpMemory: Nothing to dump at 0x0000000000420000!
2020-09-02 22:09:47,281 [root] DEBUG: DumpRegion: Failed to dump entire allocation from 0x0000000000420000 size 0x100000.
2020-09-02 22:09:47,281 [root] DEBUG: DumpPEsInRange: Scanning range 0x420000 - 0x480000.
2020-09-02 22:09:47,281 [root] DEBUG: ScanForDisguisedPE: No PE image located in range 0x420000-0x480000.
2020-09-02 22:09:47,328 [root] DEBUG: DumpMemory: CAPE output file successfully created: C:\TlGzllHozu\CAPE\4696_97442627447943492020 (size 0x5fffb)
2020-09-02 22:09:47,328 [root] DEBUG: DumpRegion: Dumped base address 0x0000000000420000, size 0x60000.
2020-09-02 22:10:01,687 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04550000 for section view with handle 0x228.
2020-09-02 22:10:01,734 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroBroker.exe
2020-09-02 22:10:01,796 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroExt\AcroExt.exe
2020-09-02 22:10:01,828 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
2020-09-02 22:10:01,875 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x004B0000 for section view with handle 0x228.
2020-09-02 22:10:01,906 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroTextExtractor.exe
2020-09-02 22:10:01,921 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04550000 for section view with handle 0x228.
2020-09-02 22:10:01,953 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe
2020-09-02 22:10:01,984 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x228.
2020-09-02 22:10:02,015 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Adobe\Reader 11.0\Reader\arh.exe
2020-09-02 22:10:02,078 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Eula.exe
2020-09-02 22:10:02,125 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04550000 for section view with handle 0x228.
2020-09-02 22:10:02,140 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Adobe\Reader 11.0\Reader\LogTransport2.exe
2020-09-02 22:10:02,265 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Adobe\Reader 11.0\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe
2020-09-02 22:10:02,312 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x228.
2020-09-02 22:10:02,406 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Adobe\Reader 11.0\Reader\wow_helper.exe
2020-09-02 22:10:02,484 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04550000 for section view with handle 0x228.
2020-09-02 22:10:02,531 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
2020-09-02 22:10:02,593 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe
2020-09-02 22:10:02,609 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x228.
2020-09-02 22:10:02,640 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
2020-09-02 22:10:02,843 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04550000 for section view with handle 0x228.
2020-09-02 22:10:02,875 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\Java\Java Update\jaucheck.exe
2020-09-02 22:10:02,921 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe
2020-09-02 22:10:02,968 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
2020-09-02 22:10:03,015 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
2020-09-02 22:10:03,031 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D780000 for section view with handle 0x228.
2020-09-02 22:10:03,062 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\microsoft shared\DW\DW20.EXE
2020-09-02 22:10:03,078 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D970000 for section view with handle 0x228.
2020-09-02 22:10:03,109 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\microsoft shared\DW\DWTRIG20.EXE
2020-09-02 22:10:03,140 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04550000 for section view with handle 0x228.
2020-09-02 22:10:03,187 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\EQNEDT32.EXE
2020-09-02 22:10:03,390 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D430000 for section view with handle 0x228.
2020-09-02 22:10:03,406 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\FLTLDR.EXE
2020-09-02 22:10:03,437 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2DCE0000 for section view with handle 0x228.
2020-09-02 22:10:03,500 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\LICLUA.EXE
2020-09-02 22:10:03,515 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x10000000 for section view with handle 0x228.
2020-09-02 22:10:03,546 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOICONS.EXE
2020-09-02 22:10:03,578 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2FBD0000 for section view with handle 0x228.
2020-09-02 22:10:03,609 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLED.EXE
2020-09-02 22:10:03,625 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D6F0000 for section view with handle 0x228.
2020-09-02 22:10:03,687 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Oarpmany.exe
2020-09-02 22:10:03,718 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2DD20000 for section view with handle 0x228.
2020-09-02 22:10:03,765 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\ODeploy.exe
2020-09-02 22:10:04,765 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D0C0000 for section view with handle 0x228.
2020-09-02 22:10:05,000 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Setup.exe
2020-09-02 22:10:05,093 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04550000 for section view with handle 0x228.
2020-09-02 22:10:05,203 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE16\LICLUA.EXE
2020-09-02 22:10:05,687 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE
2020-09-02 22:10:05,796 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2DBC0000 for section view with handle 0x228.
2020-09-02 22:10:05,937 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv\Wkconv.exe
2020-09-02 22:10:08,015 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x228.
2020-09-02 22:10:08,031 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
2020-09-02 22:10:08,125 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04550000 for section view with handle 0x228.
2020-09-02 22:10:08,156 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\elevation_service.exe
2020-09-02 22:10:08,218 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\Installer\chrmstp.exe
2020-09-02 22:10:08,281 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\Installer\setup.exe
2020-09-02 22:10:08,500 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\nacl64.exe
2020-09-02 22:10:08,656 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\notification_helper.exe
2020-09-02 22:10:08,687 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
2020-09-02 22:10:08,734 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe
2020-09-02 22:10:08,812 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleCrashHandler.exe
2020-09-02 22:10:08,859 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleCrashHandler64.exe
2020-09-02 22:10:08,921 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdate.exe
2020-09-02 22:10:08,937 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x228.
2020-09-02 22:10:08,953 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateBroker.exe
2020-09-02 22:10:08,984 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04550000 for section view with handle 0x228.
2020-09-02 22:10:09,015 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateComRegisterShell64.exe
2020-09-02 22:10:09,062 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateCore.exe
2020-09-02 22:10:09,078 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x228.
2020-09-02 22:10:09,093 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateOnDemand.exe
2020-09-02 22:10:09,140 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04550000 for section view with handle 0x228.
2020-09-02 22:10:09,218 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x004B0000 for section view with handle 0x228.
2020-09-02 22:10:09,296 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x228.
2020-09-02 22:10:09,328 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Java\jre7\bin\jabswitch.exe
2020-09-02 22:10:09,343 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04550000 for section view with handle 0x228.
2020-09-02 22:10:09,375 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Java\jre7\bin\java.exe
2020-09-02 22:10:09,390 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x228.
2020-09-02 22:10:09,421 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Java\jre7\bin\javacpl.exe
2020-09-02 22:10:09,437 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04550000 for section view with handle 0x228.
2020-09-02 22:10:09,468 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Java\jre7\bin\javaw.exe
2020-09-02 22:10:09,531 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Java\jre7\bin\javaws.exe
2020-09-02 22:10:09,562 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Java\jre7\bin\jqs.exe
2020-09-02 22:10:09,625 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x004B0000 for section view with handle 0x228.
2020-09-02 22:10:09,640 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Java\jre7\bin\ssvagent.exe
2020-09-02 22:10:09,671 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04550000 for section view with handle 0x228.
2020-09-02 22:10:09,703 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Java\jre7\bin\unpack200.exe
2020-09-02 22:10:10,109 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft\Skype for Desktop\unins000.exe
2020-09-02 22:10:11,359 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2DB60000 for section view with handle 0x228.
2020-09-02 22:10:11,390 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\1033\ONELEV.EXE
2020-09-02 22:10:11,453 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x10000000 for section view with handle 0x228.
2020-09-02 22:10:11,484 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\ACCICONS.EXE
2020-09-02 22:10:11,531 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D340000 for section view with handle 0x228.
2020-09-02 22:10:11,562 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe
2020-09-02 22:10:11,593 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2DD90000 for section view with handle 0x228.
2020-09-02 22:10:11,625 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\CLVIEW.EXE
2020-09-02 22:10:11,640 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D400000 for section view with handle 0x228.
2020-09-02 22:10:11,656 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\CNFNOT32.EXE
2020-09-02 22:10:11,750 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2F4F0000 for section view with handle 0x228.
2020-09-02 22:10:11,796 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\GRAPH.EXE
2020-09-02 22:10:12,265 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D140000 for section view with handle 0x228.
2020-09-02 22:10:12,296 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\GROOVEMN.EXE
2020-09-02 22:10:12,437 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D480000 for section view with handle 0x228.
2020-09-02 22:10:12,546 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\IEContentService.exe
2020-09-02 22:10:12,828 [root] DEBUG: MapSectionViewHandler: Added section view with handle 0x274 and local view 0x2FD50000 to global list.
2020-09-02 22:10:12,984 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\INFOPATH.EXE
2020-09-02 22:10:13,125 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x10000000 for section view with handle 0x274.
2020-09-02 22:10:13,171 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\misc.exe
2020-09-02 22:10:13,203 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2FC10000 for section view with handle 0x274.
2020-09-02 22:10:13,249 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\MSOHTMED.EXE
2020-09-02 22:10:13,281 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D910000 for section view with handle 0x274.
2020-09-02 22:10:13,328 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
2020-09-02 22:10:13,359 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2DDC0000 for section view with handle 0x274.
2020-09-02 22:10:13,390 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\MSOUC.EXE
2020-09-02 22:10:13,453 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D420000 for section view with handle 0x274.
2020-09-02 22:10:13,468 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\MSPUB.EXE
2020-09-02 22:10:13,500 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2FA70000 for section view with handle 0x274.
2020-09-02 22:10:13,515 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\MSQRY32.EXE
2020-09-02 22:10:13,562 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2DB90000 for section view with handle 0x274.
2020-09-02 22:10:13,593 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\MSTORDB.EXE
2020-09-02 22:10:13,609 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D590000 for section view with handle 0x274.
2020-09-02 22:10:13,640 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\MSTORE.EXE
2020-09-02 22:10:13,656 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D490000 for section view with handle 0x274.
2020-09-02 22:10:13,687 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\NAMECONTROLSERVER.EXE
2020-09-02 22:10:13,703 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D700000 for section view with handle 0x274.
2020-09-02 22:10:13,750 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\OIS.EXE
2020-09-02 22:10:13,781 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D500000 for section view with handle 0x274.
2020-09-02 22:10:13,812 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.EXE
2020-09-02 22:10:13,843 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D7C0000 for section view with handle 0x274.
2020-09-02 22:10:13,875 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
2020-09-02 22:10:13,921 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2D8B0000 for section view with handle 0x274.
2020-09-02 22:10:13,953 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXE
2020-09-02 22:10:13,984 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x10000000 for section view with handle 0x274.
2020-09-02 22:10:14,015 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\PPTICO.EXE
2020-09-02 22:10:14,062 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2DE80000 for section view with handle 0x274.
2020-09-02 22:10:14,109 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\protocolhandler.exe
2020-09-02 22:10:14,203 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2DB50000 for section view with handle 0x274.
2020-09-02 22:10:14,234 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\SELFCERT.EXE
2020-09-02 22:10:14,265 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:14,281 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\VPREVIEW.EXE
2020-09-02 22:10:14,296 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x2F200000 for section view with handle 0x274.
2020-09-02 22:10:14,328 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
2020-09-02 22:10:14,390 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x10000000 for section view with handle 0x274.
2020-09-02 22:10:14,562 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\WORDICON.EXE
2020-09-02 22:10:14,765 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office14\XLICONS.EXE
2020-09-02 22:10:14,796 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:14,828 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\Office16\OSPPREARM.EXE
2020-09-02 22:10:14,906 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\root\Client\AppVDllSurrogate32.exe
2020-09-02 22:10:14,968 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\root\Client\AppVDllSurrogate64.exe
2020-09-02 22:10:15,031 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\root\Client\AppVLP.exe
2020-09-02 22:10:15,437 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\root\Integration\Integrator.exe
2020-09-02 22:10:17,875 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x70EF0000 for section view with handle 0x274.
2020-09-02 22:10:17,937 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\root\Office16\ACCICONS.EXE
2020-09-02 22:10:18,125 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x004B0000 for section view with handle 0x274.
2020-09-02 22:10:18,140 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.Loader.exe
2020-09-02 22:10:18,249 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\root\Office16\AppSharingHookController.exe
2020-09-02 22:10:18,359 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:18,515 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\root\Office16\CLVIEW.EXE
2020-09-02 22:10:18,750 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\root\Office16\CNFNOT32.EXE
2020-09-02 22:10:19,046 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x004B0000 for section view with handle 0x274.
2020-09-02 22:10:19,093 [root] INFO: Added new file to list with pid None and path C:\Program Files (x86)\Microsoft Office\root\Office16\DCF\Common.DBConnection.exe
2020-09-02 22:10:19,187 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:19,734 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x73020000 for section view with handle 0x274.
2020-09-02 22:10:19,859 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:19,968 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x004B0000 for section view with handle 0x274.
2020-09-02 22:10:20,015 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:20,203 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x004B0000 for section view with handle 0x274.
2020-09-02 22:10:20,265 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:20,718 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x274.
2020-09-02 22:10:21,109 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:21,328 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x274.
2020-09-02 22:10:21,390 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:21,687 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x70F30000 for section view with handle 0x274.
2020-09-02 22:10:21,781 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:21,921 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x274.
2020-09-02 22:10:22,062 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:22,109 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x274.
2020-09-02 22:10:22,171 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:22,468 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x70FB0000 for section view with handle 0x274.
2020-09-02 22:10:22,843 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x70EF0000 for section view with handle 0x274.
2020-09-02 22:10:23,328 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:23,656 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x72FF0000 for section view with handle 0x274.
2020-09-02 22:10:23,703 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:24,281 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x274.
2020-09-02 22:10:24,484 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:25,000 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x70EF0000 for section view with handle 0x274.
2020-09-02 22:10:25,062 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x739D0000 for section view with handle 0x274.
2020-09-02 22:10:25,125 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x730D0000 for section view with handle 0x274.
2020-09-02 22:10:25,187 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x73070000 for section view with handle 0x274.
2020-09-02 22:10:25,234 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x73050000 for section view with handle 0x274.
2020-09-02 22:10:25,296 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x73020000 for section view with handle 0x274.
2020-09-02 22:10:25,343 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x73D80000 for section view with handle 0x274.
2020-09-02 22:10:25,406 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:25,453 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x73D80000 for section view with handle 0x274.
2020-09-02 22:10:25,531 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x730A0000 for section view with handle 0x274.
2020-09-02 22:10:25,609 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x72FF0000 for section view with handle 0x274.
2020-09-02 22:10:25,671 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x70F30000 for section view with handle 0x274.
2020-09-02 22:10:25,765 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x72FF0000 for section view with handle 0x274.
2020-09-02 22:10:25,812 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x739D0000 for section view with handle 0x274.
2020-09-02 22:10:25,859 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x72E50000 for section view with handle 0x274.
2020-09-02 22:10:25,921 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x70FB0000 for section view with handle 0x274.
2020-09-02 22:10:25,984 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x70EF0000 for section view with handle 0x274.
2020-09-02 22:10:26,031 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x73020000 for section view with handle 0x274.
2020-09-02 22:10:30,078 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x274.
2020-09-02 22:10:30,390 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:31,671 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x274.
2020-09-02 22:10:31,718 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:31,937 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x274.
2020-09-02 22:10:31,968 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:32,906 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x004B0000 for section view with handle 0x274.
2020-09-02 22:10:32,984 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x274.
2020-09-02 22:10:33,015 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:33,468 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x274.
2020-09-02 22:10:33,500 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:33,609 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x004B0000 for section view with handle 0x274.
2020-09-02 22:10:33,640 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:33,656 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x274.
2020-09-02 22:10:33,687 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:33,750 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x004B0000 for section view with handle 0x274.
2020-09-02 22:10:33,781 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x274.
2020-09-02 22:10:33,843 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:33,906 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x274.
2020-09-02 22:10:34,062 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:38,125 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x004B0000 for section view with handle 0x274.
2020-09-02 22:10:38,171 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x274.
2020-09-02 22:10:38,187 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x004B0000 for section view with handle 0x274.
2020-09-02 22:10:38,249 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:39,875 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x274.
2020-09-02 22:10:41,218 [root] DEBUG: MapSectionViewHandler: Added section view with handle 0x234 and local view 0x04130000 to global list.
2020-09-02 22:10:42,296 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:10:42,453 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x04130000 for section view with handle 0x274.
2020-09-02 22:10:43,609 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x004B0000 for section view with handle 0x274.
2020-09-02 22:10:46,078 [root] DEBUG: MapSectionViewHandler: Updated local view to 0x047D0000 for section view with handle 0x274.
2020-09-02 22:12:11,593 [root] DEBUG: NtTerminateProcess hook: Attempting to dump process 4580
2020-09-02 22:12:11,593 [root] DEBUG: GetHookCallerBase: thread 4200 (handle 0x0), return address 0x00403063, allocation base 0x00400000.
2020-09-02 22:12:11,609 [root] DEBUG: DoProcessDump: Dumping Imagebase at 0x00400000.
2020-09-02 22:12:11,609 [root] DEBUG: DumpImageInCurrentProcess: Attempting to dump virtual PE image.
2020-09-02 22:14:41,906 [root] INFO: Analysis timeout hit, terminating analysis.
2020-09-02 22:14:41,906 [lib.api.process] ERROR: Failed to open terminate event for pid 4580
2020-09-02 22:14:41,906 [root] INFO: Terminate event set for process 4580.
2020-09-02 22:14:41,921 [lib.api.process] INFO: Terminate event set for process 4696
2020-09-02 22:14:41,921 [root] DEBUG: Terminate Event: Attempting to dump process 4696
2020-09-02 22:14:41,921 [root] DEBUG: DoProcessDump: Dumping Imagebase at 0x000000013F980000.
2020-09-02 22:14:41,937 [root] DEBUG: DumpImageInCurrentProcess: Attempting to dump virtual PE image.
2020-09-02 22:14:41,968 [root] DEBUG: DumpProcess: Instantiating PeParser with address: 0x000000013F980000.
2020-09-02 22:14:41,968 [root] DEBUG: DumpProcess: Module entry point VA is 0x0000000000002970.
2020-09-02 22:14:42,062 [root] DEBUG: DumpProcess: Module image dump success - dump size 0x50600.
2020-09-02 22:14:42,062 [root] DEBUG: Terminate Event: CAPE shutdown complete for process 4696
2020-09-02 22:14:42,062 [lib.api.process] INFO: Termination confirmed for process 4696
2020-09-02 22:14:42,062 [root] INFO: Terminate event set for process 4696.
2020-09-02 22:14:42,078 [root] INFO: Created shutdown mutex.
2020-09-02 22:14:43,078 [root] INFO: Shutting down package.
2020-09-02 22:14:43,078 [root] INFO: Stopping auxiliary modules.
2020-09-02 22:14:43,203 [lib.common.results] WARNING: File C:\TlGzllHozu\bin\procmon.xml doesn't exist anymore
2020-09-02 22:14:43,203 [root] INFO: Finishing auxiliary modules.
2020-09-02 22:14:43,203 [root] INFO: Shutting down pipe server and dumping dropped files.
2020-09-02 22:14:52,375 [root] WARNING: Folder at path "C:\TlGzllHozu\debugger" does not exist, skip.
2020-09-02 22:14:52,406 [root] INFO: Analysis completed.

Machine

Name Label Manager Started On Shutdown On
win7x64_1 win7x64_5 KVM 2020-09-02 22:09:37 2020-09-02 22:15:46

File Details

File Name c37.exe
File Size 432640 bytes
File Type PE32 executable (GUI) Intel 80386, for MS Windows
PE timestamp 1992-06-19 22:22:17
MD5 531c0c5e943863b00c7157c05603113a
SHA1 caa18377e764a3a27c715b3d69ba2258ee4eb0b2
SHA256 4f7dd00a005caf046dd7e494fea25be2264974264d567edfc89122242b7c41bc
SHA512 d3765fa7ddd313dd68f399ee345b8bca83e5a1b3dd25203ec423c0747d7161b9207c72196ad9e393161e45b4bb7d17d1a9455b58c1669cb42eed73900d2c2413
CRC32 A5D8B595
Ssdeep 6144:k965qwOQw8oY+LtXew3TnjKmjBKO5c5EWGLXj+mNYyPMtCjgzXJfbkYmwy:b5ZroTLtOw3jjKAhAfGLKK2x79kx
ClamAV
  • Win.Trojan.Neshuta-1
  • Win.Virus.Neshta-7101689-0
  • Win.Trojan.Jadtre-5
Download Download ZIP Resubmit sample

Signatures

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Hit: PID 0 trigged the Yara rule 'shellcode_get_eip'
Hit: PID 0 trigged the Yara rule 'shellcode_stack_strings'
Hit: PID 4696 trigged the Yara rule 'embedded_pe'
Hit: PID 4696 trigged the Yara rule 'embedded_win_api'
Hit: PID 4696 trigged the Yara rule 'shellcode_get_eip'
Possible date expiration check, exits too soon after checking local time
process: c37.exe, PID 4580
Creates RWX memory
Dynamic (imported) function loading detected
DynamicLoader: kernel32.dll/SortGetHandle
DynamicLoader: kernel32.dll/SortCloseHandle
DynamicLoader: SETUPAPI.dll/CM_Get_Device_Interface_List_Size_ExW
DynamicLoader: SETUPAPI.dll/CM_Get_Device_Interface_List_ExW
DynamicLoader: ADVAPI32.dll/UnregisterTraceGuids
DynamicLoader: comctl32.dll/
DynamicLoader: kernel32.dll/FindActCtxSectionStringW
DynamicLoader: kernel32.dll/VirtualQuery
DynamicLoader: kernel32.dll/VirtualFree
DynamicLoader: kernel32.dll/VirtualAlloc
DynamicLoader: kernel32.dll/SetLastError
DynamicLoader: kernel32.dll/VirtualProtect
DynamicLoader: kernel32.dll/IsBadReadPtr
DynamicLoader: kernel32.dll/LoadLibraryA
DynamicLoader: kernel32.dll/GetProcAddress
DynamicLoader: kernel32.dll/FreeLibrary
DynamicLoader: kernel32.dll/GetNativeSystemInfo
DynamicLoader: kernel32.dll/HeapAlloc
DynamicLoader: kernel32.dll/GetProcessHeap
DynamicLoader: kernel32.dll/HeapFree
DynamicLoader: kernel32.dll/CloseHandle
DynamicLoader: kernel32.dll/ConnectNamedPipe
DynamicLoader: kernel32.dll/CreateFileA
DynamicLoader: kernel32.dll/CreateNamedPipeA
DynamicLoader: kernel32.dll/CreateThread
DynamicLoader: kernel32.dll/DeleteCriticalSection
DynamicLoader: kernel32.dll/EnterCriticalSection
DynamicLoader: kernel32.dll/GetCurrentProcess
DynamicLoader: kernel32.dll/GetCurrentProcessId
DynamicLoader: kernel32.dll/GetCurrentThreadId
DynamicLoader: kernel32.dll/GetLastError
DynamicLoader: kernel32.dll/GetModuleHandleA
DynamicLoader: kernel32.dll/GetSystemTimeAsFileTime
DynamicLoader: kernel32.dll/GetTickCount
DynamicLoader: kernel32.dll/InitializeCriticalSection
DynamicLoader: kernel32.dll/LeaveCriticalSection
DynamicLoader: kernel32.dll/LoadLibraryW
DynamicLoader: kernel32.dll/QueryPerformanceCounter
DynamicLoader: kernel32.dll/ReadFile
DynamicLoader: kernel32.dll/RtlAddFunctionTable
DynamicLoader: kernel32.dll/RtlCaptureContext
DynamicLoader: kernel32.dll/RtlLookupFunctionEntry
DynamicLoader: kernel32.dll/RtlVirtualUnwind
DynamicLoader: kernel32.dll/SetUnhandledExceptionFilter
DynamicLoader: kernel32.dll/Sleep
DynamicLoader: kernel32.dll/TerminateProcess
DynamicLoader: kernel32.dll/TlsGetValue
DynamicLoader: kernel32.dll/UnhandledExceptionFilter
DynamicLoader: kernel32.dll/VirtualAlloc
DynamicLoader: kernel32.dll/VirtualProtect
DynamicLoader: kernel32.dll/VirtualQuery
DynamicLoader: kernel32.dll/WriteFile
DynamicLoader: msvcrt.dll/__dllonexit
DynamicLoader: msvcrt.dll/__iob_func
DynamicLoader: msvcrt.dll/_amsg_exit
DynamicLoader: msvcrt.dll/_initterm
DynamicLoader: msvcrt.dll/_lock
DynamicLoader: msvcrt.dll/_onexit
DynamicLoader: msvcrt.dll/_unlock
DynamicLoader: msvcrt.dll/abort
DynamicLoader: msvcrt.dll/calloc
DynamicLoader: msvcrt.dll/free
DynamicLoader: msvcrt.dll/fwrite
DynamicLoader: msvcrt.dll/malloc
DynamicLoader: msvcrt.dll/memcpy
DynamicLoader: msvcrt.dll/signal
DynamicLoader: msvcrt.dll/sprintf
DynamicLoader: msvcrt.dll/strlen
DynamicLoader: msvcrt.dll/strncmp
DynamicLoader: msvcrt.dll/vfprintf
Reads data out of its own binary image
self_read: process: c37.exe, pid: 4580, offset: 0x00000000, length: 0x0000a200
self_read: process: c37.exe, pid: 4580, offset: 0x00a2c200, length: 0x00055600
self_read: process: c37.exe, pid: 4580, offset: 0x05b8c300, length: 0x0000a200
CAPE extracted potentially suspicious content
c37.exe: Unpacked PE Image
c37.exe: Unpacked Shellcode
c37.exe: Unpacked Shellcode
c37.exe: Unpacked Shellcode
c37.exe: Unpacked PE Image
c37.exe: Unpacked Shellcode
Drops a binary and executes it
binary: C:\Users\Louise\AppData\Local\Temp\3582-490\c37.exe
Queries or connects to DNS-Over-HTTPS/DNS-Over-TLS domain or IP address
ip: 1.1.1.1
Unconventionial language used in binary resources: Russian
The binary contains an unknown PE section name indicative of packing
unknown section: name: CODE, entropy: 6.51, characteristics: IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ, raw_size: 0x00007400, virtual_size: 0x0000722c
unknown section: name: DATA, entropy: 3.15, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x00000400, virtual_size: 0x00000218
unknown section: name: BSS, entropy: 0.00, characteristics: IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x00000000, virtual_size: 0x0000a899
Authenticode signature is invalid
authenticode error: No signature found. SignTool Error File not valid C\Users\Louise\AppData\Local\Temp\c37.exe
Creates known Neshta virus file artifacts
Installs itself for autorun at Windows startup
key: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command\(Default)
data: C:\Windows\svchost.com "%1" %*
Network activity detected but not expressed in API logs
Likely virus infection of existing system binary
file: c:\program files (x86)\common files\microsoft shared\office14\oarpmany.exe
file: c:\program files (x86)\microsoft office\root\vfs\programfilesx86\microsoft analysis services\as oledb\140\sqldumper.exe
file: c:\programdata\chocolatey\redirects\cup.exe
file: c:\program files (x86)\mozilla thunderbird\crashreporter.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\ohub32.exe
file: c:\programdata\chocolatey\bin\cpush.exe
file: c:\program files (x86)\microsoft office\root\office16\msoadfsb.exe
file: c:\programdata\chocolatey\bin\chocolatey.exe
file: c:\program files (x86)\mozilla thunderbird\plugin-container.exe
file: c:\programdata\chocolatey\bin\clist.exe
file: c:\python27\lib\site-packages\setuptools\gui-64.exe
file: c:\program files (x86)\microsoft office\root\office16\msoasb.exe
file: c:\program files (x86)\mozilla firefox\firefox.exe
file: c:\python27\lib\distutils\command\wininst-9.0-amd64.exe
file: c:\program files (x86)\adobe\reader 11.0\reader\acrotextextractor.exe
file: c:\program files (x86)\microsoft office\office14\msohtmed.exe
file: c:\program files (x86)\microsoft office\root\office16\msohtmed.exe
file: c:\program files (x86)\microsoft office\root\office16\dcf\databasecompare.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\grv_icons.exe
file: c:\programdata\chocolatey\choco.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\accicons.exe
file: c:\program files (x86)\common files\microsoft shared\office14\liclua.exe
file: c:\program files (x86)\mozilla thunderbird\minidump-analyzer.exe
file: c:\program files (x86)\microsoft office\root\office16\setlang.exe
file: c:\programdata\microsoft\clicktorun\{9ac08e99-230b-47e8-9721-4577b7f124ea}\integrator.exe
file: c:\program files (x86)\microsoft office\root\office16\cnfnot32.exe
file: c:\python27\lib\distutils\command\wininst-6.0.exe
file: c:\program files (x86)\mozilla firefox\minidump-analyzer.exe
file: c:\program files (x86)\microsoft office\office14\iecontentservice.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\joticon.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\pj11icon.exe
file: c:\program files (x86)\mozilla firefox\maintenanceservice.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\outicon.exe
file: c:\programdata\chocolatey\bin\notepad++.exe
file: c:\program files (x86)\common files\microsoft shared\dw\dw20.exe
file: c:\program files (x86)\microsoft office\office14\graph.exe
file: c:\program files (x86)\microsoft office\office14\msosync.exe
file: c:\program files (x86)\common files\microsoft shared\office16\liclua.exe
file: c:\python27\lib\site-packages\setuptools\cli-arm-32.exe
file: c:\program files (x86)\common files\java\java update\jaucheck.exe
file: c:\program files (x86)\microsoft office\office14\mstore.exe
file: c:\program files (x86)\microsoft office\root\office16\lync99.exe
file: c:\program files (x86)\microsoft office\office14\selfcert.exe
file: c:\program files (x86)\microsoft office\office14\protocolhandler.exe
file: c:\program files (x86)\microsoft office\root\vfs\programfilescommonx86\microsoft shared\office16\msoicons.exe
file: c:\programdata\chocolatey\bin\cver.exe
file: c:\programdata\chocolatey\tools\7z.exe
file: c:\program files (x86)\common files\microsoft shared\office14\msoicons.exe
file: c:\programdata\chocolatey\redirects\choco.exe
file: c:\python27\lib\distutils\command\wininst-9.0.exe
file: c:\program files (x86)\microsoft office\office14\misc.exe
file: c:\users\louise\appdata\local\microsoft\onedrive\19.232.1124.0008\filecoauth.exe
file: c:\program files (x86)\adobe\reader 11.0\reader\acrord32.exe
file: c:\python27\lib\site-packages\setuptools\cli-64.exe
file: c:\program files (x86)\microsoft office\office14\msqry32.exe
file: c:\program files (x86)\google\update\1.3.35.451\googleupdatecore.exe
file: c:\python27\lib\site-packages\setuptools\gui.exe
file: c:\program files (x86)\mozilla firefox\pingsender.exe
file: c:\programdata\adobe\setup\{ac76ba86-7ad7-1033-7b44-ab0000000001}\setup.exe
file: c:\program files (x86)\common files\java\java update\jusched.exe
file: c:\program files (x86)\google\chrome\application\81.0.4044.113\elevation_service.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-001f-0409-0000-0000000ff1ce}\misc.exe
file: c:\program files (x86)\microsoft office\office14\mstordb.exe
file: c:\programdata\chocolatey\redirects\cpack.exe
file: c:\program files (x86)\java\jre7\bin\ssvagent.exe
file: c:\python27\lib\site-packages\pip\_vendor\distlib\t64.exe
file: c:\program files (x86)\google\chrome\application\81.0.4044.113\notification_helper.exe
file: c:\python27\lib\site-packages\pip\_vendor\distlib\w64.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\osmadminicon.exe
file: c:\program files (x86)\microsoft office\root\office16\xlicons.exe
file: c:\users\louise\appdata\local\microsoft\onedrive\onedrivestandaloneupdater.exe
file: c:\python27\lib\distutils\command\wininst-8.0.exe
file: c:\program files (x86)\microsoft office\office14\onenotem.exe
file: c:\program files (x86)\microsoft office\root\office16\wordicon.exe
file: c:\program files (x86)\microsoft office\office14\ois.exe
file: c:\program files (x86)\google\update\1.3.35.451\googlecrashhandler64.exe
file: c:\program files (x86)\microsoft office\root\office16\dcf\filecompare.exe
file: c:\program files (x86)\microsoft office\root\office16\msqry32.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-001f-040c-0000-0000000ff1ce}\misc.exe
file: c:\program files (x86)\microsoft office\office14\accicons.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\dbcicons.exe
file: c:\python27\scripts\easy_install.exe
file: c:\program files (x86)\adobe\reader 11.0\reader\arh.exe
file: c:\program files (x86)\common files\microsoft shared\textconv\wksconv\wkconv.exe
file: c:\program files (x86)\microsoft office\root\office16\msoev.exe
file: c:\program files (x86)\microsoft office\root\vfs\programfilescommonx86\microsoft shared\office16\msoxmled.exe
file: c:\program files (x86)\microsoft office\root\client\appvlp.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\wordicon.exe
file: c:\program files (x86)\microsoft silverlight\sllauncher.exe
file: c:\program files (x86)\google\update\1.3.35.451\googleupdate.exe
file: c:\python27\scripts\easy_install-2.7.exe
file: c:\program files (x86)\mozilla firefox\uninstall\helper.exe
file: c:\python27\lib\distutils\command\wininst-7.1.exe
file: c:\users\louise\appdata\local\microsoft\onedrive\19.232.1124.0008\filesyncconfig.exe
file: c:\program files (x86)\microsoft office\root\office16\msouc.exe
file: c:\program files (x86)\microsoft office\root\office16\dcf\common.dbconnection64.exe
file: c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe
file: c:\programdata\chocolatey\redirects\cinst.exe
file: c:\python27\scripts\pip2.7.exe
file: c:\program files (x86)\microsoft office\root\office16\onenote.exe
file: c:\program files (x86)\google\chrome\application\81.0.4044.113\nacl64.exe
file: c:\program files (x86)\microsoft office\office14\vpreview.exe
file: c:\program files (x86)\google\update\1.3.35.451\googleupdateondemand.exe
file: c:\program files (x86)\adobe\reader 11.0\reader\wow_helper.exe
file: c:\program files (x86)\microsoft office\root\vfs\programfilesx64\microsoft office\office16\msohtmed.exe
file: c:\program files (x86)\microsoft office\office14\onenote.exe
file: c:\programdata\chocolatey\bin\cpack.exe
file: c:\program files (x86)\mozilla thunderbird\pingsender.exe
file: c:\program files (x86)\microsoft office\root\vfs\programfilescommonx86\microsoft shared\office16\fltldr.exe
file: c:\program files (x86)\mozilla maintenance service\maintenanceservice.exe
file: c:\program files (x86)\mozilla thunderbird\updater.exe
file: c:\program files (x86)\adobe\reader 11.0\reader\acrobroker.exe
file: c:\program files (x86)\java\jre7\bin\javacpl.exe
file: c:\program files (x86)\microsoft silverlight\5.1.20125.0\coregen.exe
file: c:\program files (x86)\microsoft office\root\office16\iecontentservice.exe
file: c:\program files (x86)\adobe\reader 11.0\reader\acroext\acroext.exe
file: c:\program files (x86)\microsoft office\root\office16\msoia.exe
file: c:\program files (x86)\microsoft office\root\office16\orgchart.exe
file: c:\program files (x86)\mozilla firefox\updater.exe
file: c:\program files (x86)\microsoft office\root\client\appvdllsurrogate64.exe
file: c:\python27\lib\site-packages\setuptools\gui-32.exe
file: c:\program files (x86)\mozilla thunderbird\maintenanceservice_installer.exe
file: c:\programdata\chocolatey\bin\cinst.exe
file: c:\msocache\all users\{90140000-0011-0000-0000-0000000ff1ce}-c\ose.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\xlicons.exe
file: c:\program files (x86)\microsoft office\root\office16\onenotem.exe
file: c:\program files (x86)\mozilla firefox\crashreporter.exe
file: c:\program files (x86)\adobe\reader 11.0\reader\plug_ins\pi_brokers\64bitmapibroker.exe
file: c:\program files (x86)\java\jre7\bin\javaw.exe
file: c:\program files (x86)\microsoft office\root\office16\msotd.exe
file: c:\program files (x86)\microsoft office\office14\xlicons.exe
file: c:\program files (x86)\microsoft office\root\office16\protocolhandler.exe
file: c:\programdata\chocolatey\bin\cuninst.exe
file: c:\programdata\chocolatey\bin\cup.exe
file: c:\programdata\chocolatey\redirects\cver.exe
file: c:\program files (x86)\microsoft office\root\office16\dcf\spreadsheetcompare.exe
file: c:\python27\scripts\pypm-2.7.exe
file: c:\program files (x86)\microsoft office\root\office16\officeappguardwin32.exe
file: c:\python27\lib\site-packages\setuptools\cli-32.exe
file: c:\program files (x86)\common files\microsoft shared\office14\fltldr.exe
file: c:\program files (x86)\common files\microsoft shared\dw\dwtrig20.exe
file: c:\program files (x86)\common files\microsoft shared\equation\eqnedt32.exe
file: c:\program files (x86)\adobe\reader 11.0\reader\eula.exe
file: c:\program files (x86)\google\update\1.3.35.451\googleupdatecomregistershell64.exe
file: c:\program files (x86)\java\jre7\bin\unpack200.exe
file: c:\program files (x86)\microsoft office\root\office16\msosync.exe
file: c:\program files (x86)\mozilla thunderbird\thunderbird.exe
file: c:\program files (x86)\microsoft office\root\office16\scanpst.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\pptico.exe
file: c:\program files (x86)\mozilla thunderbird\uninstall\helper.exe
file: c:\program files (x86)\microsoft office\root\office16\addins\microsoft power query for excel integrated\bin\microsoft.mashup.container.loader.exe
file: c:\programdata\chocolatey\redirects\cuninst.exe
file: c:\program files (x86)\google\chrome\application\chrome_proxy.exe
file: c:\program files (x86)\microsoft office\root\office16\powerpnt.exe
file: c:\program files (x86)\microsoft office\office14\1033\onelev.exe
file: c:\program files (x86)\adobe\reader 11.0\reader\adobecollabsync.exe
file: c:\program files (x86)\microsoft office\root\office16\vpreview.exe
file: c:\program files (x86)\java\jre7\bin\jabswitch.exe
file: c:\program files (x86)\common files\microsoft shared\office14\msoxmled.exe
file: c:\program files (x86)\microsoft office\root\office16\accicons.exe
file: c:\program files (x86)\common files\adobe\arm\1.0\adobearmhelper.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\misc.exe
file: c:\program files (x86)\microsoft office\root\client\appvdllsurrogate32.exe
file: c:\program files (x86)\microsoft office\root\vfs\programfilesx64\microsoft office\office16\appsharinghookcontroller64.exe
file: c:\program files (x86)\common files\java\java update\jucheck.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\sscicons.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\visicon.exe
file: c:\programdata\chocolatey\bin\choco.exe
file: c:\python27\lib\site-packages\setuptools\gui-arm-32.exe
file: c:\program files (x86)\common files\microsoft shared\office14\office setup controller\setup.exe
file: c:\program files (x86)\google\chrome\application\81.0.4044.113\installer\setup.exe
file: c:\program files (x86)\microsoft\skype for desktop\unins000.exe
file: c:\program files (x86)\microsoft office\root\integration\integrator.exe
file: c:\program files (x86)\microsoft office\root\office16\skypesrv\skypeserver.exe
file: c:\program files (x86)\mozilla firefox\default-browser-agent.exe
file: c:\program files (x86)\microsoft office\root\office16\appsharinghookcontroller.exe
file: c:\program files (x86)\mozilla maintenance service\uninstall.exe
file: c:\program files (x86)\microsoft silverlight\5.1.20125.0\silverlight.configuration.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\pubs.exe
file: c:\users\louise\appdata\local\microsoft\onedrive\19.232.1124.0008\filesynchelper.exe
file: c:\program files (x86)\microsoft office\office14\pptico.exe
file: c:\program files (x86)\microsoft office\root\office16\selfcert.exe
file: c:\program files (x86)\google\chrome\application\chrome.exe
file: c:\program files (x86)\common files\microsoft shared\office14\office setup controller\odeploy.exe
file: c:\program files (x86)\microsoft office\root\vfs\programfilescommonx64\microsoft shared\office16\msoxmled.exe
file: c:\users\louise\appdata\local\microsoft\onedrive\19.232.1124.0008\onedriveupdaterservice.exe
file: c:\program files (x86)\google\update\1.3.35.451\googleupdatebroker.exe
file: c:\program files (x86)\microsoft office\office14\msouc.exe
file: c:\program files (x86)\microsoft office\root\office16\dcf\common.dbconnection.exe
file: c:\program files (x86)\common files\microsoft shared\source engine\ose.exe
file: c:\program files (x86)\microsoft office\root\office16\namecontrolserver.exe
file: c:\program files (x86)\microsoft office\office14\cnfnot32.exe
file: c:\program files (x86)\microsoft office\root\office16\sdxhelper.exe
file: c:\python27\lib\site-packages\setuptools\cli.exe
file: c:\program files (x86)\microsoft office\root\office16\pptico.exe
file: c:\program files (x86)\microsoft office\office14\wordicon.exe
file: c:\msocache\all users\{90140000-0115-0409-0000-0000000ff1ce}-c\dw20.exe
file: c:\program files (x86)\microsoft office\office14\infopath.exe
file: c:\program files (x86)\microsoft office\office14\namecontrolserver.exe
file: c:\program files (x86)\microsoft office\office14\powerpnt.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\lyncicon.exe
file: c:\program files (x86)\common files\adobe\arm\1.0\armsvc.exe
file: c:\program files (x86)\microsoft office\office14\winword.exe
file: c:\programdata\chocolatey\redirects\cpush.exe
file: c:\programdata\chocolatey\redirects\chocolatey.exe
file: c:\python27\lib\site-packages\pip\_vendor\distlib\t32.exe
file: c:\python27\scripts\pip2.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\msouc.exe
file: c:\program files (x86)\microsoft office\root\office16\olcfg.exe
file: c:\program files (x86)\microsoft office\root\vfs\programfilescommonx86\microsoft shared\dw\dwtrig20.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-006e-0409-0000-0000000ff1ce}\misc.exe
file: c:\program files (x86)\mozilla thunderbird\maintenanceservice.exe
file: c:\program files (x86)\microsoft office\root\office16\graph.exe
file: c:\program files (x86)\java\jre7\bin\java.exe
file: c:\program files (x86)\microsoft office\office14\bcssync.exe
file: c:\program files (x86)\mozilla firefox\maintenanceservice_installer.exe
file: c:\msocache\all users\{90140000-0115-0409-0000-0000000ff1ce}-c\dwtrig20.exe
file: c:\program files (x86)\google\chrome\application\81.0.4044.113\installer\chrmstp.exe
file: c:\program files (x86)\microsoft office\root\office16\officebackgroundtaskhandler.exe
file: c:\program files (x86)\microsoft office\root\office16\clview.exe
file: c:\program files (x86)\microsoft office\office14\clview.exe
file: c:\program files (x86)\adobe\reader 11.0\reader\logtransport2.exe
file: c:\program files (x86)\microsoft office\root\vfs\programfilescommonx86\microsoft shared\source engine\ose.exe
file: c:\program files (x86)\slack\update.exe
file: c:\python27\scripts\virtualenv.exe
file: c:\program files (x86)\microsoft office\root\office16\misc.exe
file: c:\python27\lib\site-packages\pip\_vendor\distlib\w32.exe
file: c:\users\louise\appdata\local\microsoft\onedrive\onedrive.exe
file: c:\program files (x86)\google\update\1.3.35.451\googlecrashhandler.exe
file: c:\program files (x86)\microsoft office\office16\ospprearm.exe
file: c:\program files (x86)\java\jre7\bin\jqs.exe
file: c:\program files (x86)\microsoft office\root\office16\ocpubmgr.exe
file: c:\program files (x86)\mozilla firefox\plugin-container.exe
file: c:\program files (x86)\java\jre7\bin\javaws.exe
file: c:\programdata\chocolatey\tools\shimgen.exe
file: c:\program files (x86)\microsoft office\root\vfs\programfilescommonx86\microsoft shared\dw\dw20.exe
file: c:\program files (x86)\common files\microsoft shared\vsto\10.0\vstoinstaller.exe
file: c:\program files (x86)\microsoft office\root\office16\perfboost.exe
file: c:\program files (x86)\microsoft office\root\office16\ucmapi.exe
file: c:\program files (x86)\microsoft office\root\vfs\programfilescommonx86\microsoft shared\office16\olicenseheartbeat.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-001f-0c0a-0000-0000000ff1ce}\misc.exe
file: c:\program files (x86)\microsoft office\root\vfs\programfilescommonx64\microsoft shared\officesoftwareprotectionplatform\osppsvc.exe
file: c:\programdata\chocolatey\redirects\clist.exe
file: c:\python27\removepillow.exe
file: c:\program files (x86)\common files\java\java update\jaureg.exe
file: c:\program files (x86)\microsoft office\root\office16\msosrec.exe
file: c:\program files (x86)\microsoft office\office14\mspub.exe
file: c:\python27\w9xpopen.exe
file: c:\python27\scripts\pip.exe
file: c:\python27\scripts\virtualenv-2.7.exe
file: c:\python27\scripts\pypm.exe
file: c:\users\louise\appdata\local\package cache\{3182483d-078b-48fa-92c2-798baa1fe27d}\python-3.8.2.exe
file: c:\program files (x86)\microsoft office\root\office16\winword.exe
file: c:\msocache\all users\{90140000-0011-0000-0000-0000000ff1ce}-c\setup.exe
file: c:\program files (x86)\microsoft office\office14\groovemn.exe
file: c:\program files (x86)\microsoft office\root\vfs\windows\installer\{90160000-000f-0000-0000-0000000ff1ce}\osmclienticon.exe
File has been identified by 63 Antiviruses on VirusTotal as malicious
Bkav: W32.NeshtaB.PE
Elastic: malicious (high confidence)
Cynet: Malicious (score: 100)
CAT-QuickHeal: W32.Neshta.C8
McAfee: W32/HLLP.41472.e
Malwarebytes: Virus.Neshta
Zillya: Virus.Neshta.Win32.1
Sangfor: Malware
K7AntiVirus: Virus ( 00556e571 )
K7GW: Virus ( 00556e571 )
Cybereason: malicious.e94386
TrendMicro: PE_NESHTA.A
Baidu: Win32.Virus.Neshta.a
F-Prot: W32/Neshta.C
Symantec: W32.Neshuta
ESET-NOD32: Win32/Neshta.A
APEX: Malicious
ClamAV: Win.Trojan.Neshuta-1
GData: Win32.Virus.Neshta.D
Kaspersky: Virus.Win32.Neshta.a
BitDefender: Win32.Neshta.A
NANO-Antivirus: Trojan.Win32.Winlock.fmobyw
ViRobot: Win32.Neshta.Gen.A
MicroWorld-eScan: Win32.Neshta.A
Avast: Win32:Apanas [Trj]
Tencent: Virus.Win32.Neshta.a
Ad-Aware: Win32.Neshta.A
F-Secure: Malware.W32/Neshta.A
DrWeb: Win32.HLLP.Neshta
VIPRE: Virus.Win32.Neshta.a (v)
Invincea: heuristic
MaxSecure: Virus.Infector.Gen9
FireEye: Generic.mg.531c0c5e943863b0
Sophos: W32/Neshta-D
Ikarus: Virus.Win32.Neshta
Cyren: W32/Trojan.OBIX-2981
Jiangmin: Virus.Neshta.a
Avira: W32/Neshta.A
Antiy-AVL: Virus/Win32.Neshta.a
Kingsoft: Win32.Neshta.nl.30720
Arcabit: Win32.Neshta.A
ZoneAlarm: Virus.Win32.Neshta.a
Microsoft: Virus:Win32/Neshta.A
TACHYON: Virus/W32.Neshta
AhnLab-V3: Win32/Neshta
Acronis: suspicious
VBA32: Virus.Win32.Neshta.a
ALYac: Win32.Neshta.A
MAX: malware (ai score=88)
Cylance: Unsafe
Zoner: Virus.Win32.19514
TrendMicro-HouseCall: PE_NESHTA.A
Rising: Win32.Neshta.a (CLASSIC)
Yandex: Win32.Neshta.A
SentinelOne: DFI - Malicious PE
eGambit: Unsafe.AI_Score_100%
Fortinet: W32/Generic.AC.171!tr
BitDefenderTheta: AI:FileInfector.D5C3B0640E
AVG: Win32:Apanas [Trj]
Panda: W32/Neshta.A
CrowdStrike: win/malicious_confidence_100% (D)
Qihoo-360: Virus.Win32.Neshta.B
Clamav Hits in Target/Dropped/SuriExtracted
4f7dd00a005caf046dd7e494fea25be2264974264d567edfc89122242b7c41bc: Win.Trojan.Neshuta-1, target, type:PE32 executable (GUI) Intel 80386, for MS Windows
4f7dd00a005caf046dd7e494fea25be2264974264d567edfc89122242b7c41bc: Win.Virus.Neshta-7101689-0, target, type:PE32 executable (GUI) Intel 80386, for MS Windows
4f7dd00a005caf046dd7e494fea25be2264974264d567edfc89122242b7c41bc: Win.Trojan.Jadtre-5, target, type:PE32 executable (GUI) Intel 80386, for MS Windows
fcb52973c36b8b9c2a864f9a1781482a6726134cebefabea78380cd681013dde: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\DW\DWTRIG20.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
fcb52973c36b8b9c2a864f9a1781482a6726134cebefabea78380cd681013dde: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\DW\DWTRIG20.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
fcb52973c36b8b9c2a864f9a1781482a6726134cebefabea78380cd681013dde: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\DW\DWTRIG20.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
a8dc8271ed6f0cdd6049d21b712c3e6532a2daa3ba407c75bae3e06ef3003e0d: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateCore.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
a8dc8271ed6f0cdd6049d21b712c3e6532a2daa3ba407c75bae3e06ef3003e0d: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateCore.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
a8dc8271ed6f0cdd6049d21b712c3e6532a2daa3ba407c75bae3e06ef3003e0d: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateCore.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
4608aa54617b88c38115e89b40096ac3ed3e8d1bd5c480ff9ab6a8cd771feaa8: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSTORE.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
4608aa54617b88c38115e89b40096ac3ed3e8d1bd5c480ff9ab6a8cd771feaa8: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSTORE.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
4608aa54617b88c38115e89b40096ac3ed3e8d1bd5c480ff9ab6a8cd771feaa8: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSTORE.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
6cd5d3395c645d11d118c831648ec4852186fb8453117e41c82c615906168b4f: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\NAMECONTROLSERVER.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
6cd5d3395c645d11d118c831648ec4852186fb8453117e41c82c615906168b4f: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\NAMECONTROLSERVER.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
6cd5d3395c645d11d118c831648ec4852186fb8453117e41c82c615906168b4f: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\NAMECONTROLSERVER.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
8c14ea694e39657d9c5b0fbd4c0477af1f9baf78d05d9c14e978a241773292a1: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSTORDB.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
8c14ea694e39657d9c5b0fbd4c0477af1f9baf78d05d9c14e978a241773292a1: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSTORDB.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
8c14ea694e39657d9c5b0fbd4c0477af1f9baf78d05d9c14e978a241773292a1: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSTORDB.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
58dc48bb751fe92bb65724ea27ed625d7d8718380a00517d778bd253a6fbb23a: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\Java\Java Update\jaucheck.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
58dc48bb751fe92bb65724ea27ed625d7d8718380a00517d778bd253a6fbb23a: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\Java\Java Update\jaucheck.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
58dc48bb751fe92bb65724ea27ed625d7d8718380a00517d778bd253a6fbb23a: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\Java\Java Update\jaucheck.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
e17cd94c08fc0e001a49f43a0801cea4625fb9aee211b6dfebebec446c21f460: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\setup.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
e17cd94c08fc0e001a49f43a0801cea4625fb9aee211b6dfebebec446c21f460: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\setup.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
e17cd94c08fc0e001a49f43a0801cea4625fb9aee211b6dfebebec446c21f460: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\setup.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
e7c6b1488aa033ecdb416a5d187b8150635bcb19be670e058a19e2d650432fd1: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\DW\DW20.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
e7c6b1488aa033ecdb416a5d187b8150635bcb19be670e058a19e2d650432fd1: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\DW\DW20.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
e7c6b1488aa033ecdb416a5d187b8150635bcb19be670e058a19e2d650432fd1: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\DW\DW20.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
54bbb4871c3c4ef83f0bf87f99eb4c78f71951608d628703bfd8b0ea8b4cd9cd: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.Loader.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
54bbb4871c3c4ef83f0bf87f99eb4c78f71951608d628703bfd8b0ea8b4cd9cd: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.Loader.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
54bbb4871c3c4ef83f0bf87f99eb4c78f71951608d628703bfd8b0ea8b4cd9cd: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.Loader.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
d6623d94e956d40db31a9581b72fd6f8e99d8dac4bbdad32e85e078d69af95a8: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\jqs.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
d6623d94e956d40db31a9581b72fd6f8e99d8dac4bbdad32e85e078d69af95a8: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\jqs.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
d6623d94e956d40db31a9581b72fd6f8e99d8dac4bbdad32e85e078d69af95a8: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\jqs.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
593e60cc30ae0789448547195af77f550387f6648d45847ea244dd0dd7abf03d: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\dwtrig20.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
593e60cc30ae0789448547195af77f550387f6648d45847ea244dd0dd7abf03d: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\dwtrig20.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
593e60cc30ae0789448547195af77f550387f6648d45847ea244dd0dd7abf03d: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\dwtrig20.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
f31a185e851fc6773e8f931e3a6f0ddd0202efe91db163c3c545ffd13dd45225: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\ACCICONS.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
f31a185e851fc6773e8f931e3a6f0ddd0202efe91db163c3c545ffd13dd45225: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\ACCICONS.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
f31a185e851fc6773e8f931e3a6f0ddd0202efe91db163c3c545ffd13dd45225: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\ACCICONS.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
ba3dc87fca4641e5f5486c4d50c09d087e65264e6c5c885fa6866f6ccb23167b: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\EQNEDT32.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
ba3dc87fca4641e5f5486c4d50c09d087e65264e6c5c885fa6866f6ccb23167b: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\EQNEDT32.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
ba3dc87fca4641e5f5486c4d50c09d087e65264e6c5c885fa6866f6ccb23167b: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\EQNEDT32.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
2a0aa0763fdef9c38c5dd4d50703f0c7e27f4903c139804ec75e55f8388139ae: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\ose.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
2a0aa0763fdef9c38c5dd4d50703f0c7e27f4903c139804ec75e55f8388139ae: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\ose.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
2a0aa0763fdef9c38c5dd4d50703f0c7e27f4903c139804ec75e55f8388139ae: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\ose.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
34ca28eefcd155bdcf88422deae5f5a12874c65e67d331ef3cbf4000c634c41a: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\INFOPATH.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
34ca28eefcd155bdcf88422deae5f5a12874c65e67d331ef3cbf4000c634c41a: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\INFOPATH.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
34ca28eefcd155bdcf88422deae5f5a12874c65e67d331ef3cbf4000c634c41a: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\INFOPATH.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Windows\svchost.com, type:PE32 executable (GUI) Intel 80386, for MS Windows
980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Windows\svchost.com, type:PE32 executable (GUI) Intel 80386, for MS Windows
980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Windows\svchost.com, type:PE32 executable (GUI) Intel 80386, for MS Windows
51eb2a648dfec54e208152c063d6ff98813584cec70c310f1374214831c1492f: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
51eb2a648dfec54e208152c063d6ff98813584cec70c310f1374214831c1492f: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
51eb2a648dfec54e208152c063d6ff98813584cec70c310f1374214831c1492f: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
3ae4a1d9d536af34b68b1269d42ea32ce8151bbd7af896e0722686bcb44a8b0b: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\GROOVEMN.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
3ae4a1d9d536af34b68b1269d42ea32ce8151bbd7af896e0722686bcb44a8b0b: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\GROOVEMN.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
3ae4a1d9d536af34b68b1269d42ea32ce8151bbd7af896e0722686bcb44a8b0b: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\GROOVEMN.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
5acb596c9877c6233ba533a52a2065cd9853be417600a48159e55123537f100c: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\ACCICONS.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
5acb596c9877c6233ba533a52a2065cd9853be417600a48159e55123537f100c: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\ACCICONS.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
5acb596c9877c6233ba533a52a2065cd9853be417600a48159e55123537f100c: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\ACCICONS.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
ffbe4d2dbe67142d19afe347552d74ac13317992896bd2405906c2fb2af76f45: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
ffbe4d2dbe67142d19afe347552d74ac13317992896bd2405906c2fb2af76f45: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
ffbe4d2dbe67142d19afe347552d74ac13317992896bd2405906c2fb2af76f45: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
d35ff11a0c2e86b69b1b5af7d0b55773dad32cd88b35fe8b954cae91f704d6b6: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\ODeploy.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
d35ff11a0c2e86b69b1b5af7d0b55773dad32cd88b35fe8b954cae91f704d6b6: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\ODeploy.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
d35ff11a0c2e86b69b1b5af7d0b55773dad32cd88b35fe8b954cae91f704d6b6: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\ODeploy.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
a410c6dc3aebca60dd9069aafa6ce3cafb515dd19b801bcc585127de02dbebd2: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleCrashHandler.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
a410c6dc3aebca60dd9069aafa6ce3cafb515dd19b801bcc585127de02dbebd2: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleCrashHandler.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
a410c6dc3aebca60dd9069aafa6ce3cafb515dd19b801bcc585127de02dbebd2: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleCrashHandler.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
d9d9c467dc192b0b824652118de163eb52757f0d1166fb860408804d96c244d6: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\notification_helper.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
d9d9c467dc192b0b824652118de163eb52757f0d1166fb860408804d96c244d6: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\notification_helper.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
d9d9c467dc192b0b824652118de163eb52757f0d1166fb860408804d96c244d6: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\notification_helper.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
112ab6f4f5c3bcf7ea5c31d82de305b560a0c2a5a3891a2be70b232dde5a5bc6: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\LogTransport2.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
112ab6f4f5c3bcf7ea5c31d82de305b560a0c2a5a3891a2be70b232dde5a5bc6: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\LogTransport2.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
112ab6f4f5c3bcf7ea5c31d82de305b560a0c2a5a3891a2be70b232dde5a5bc6: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\LogTransport2.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
2ca89680db88640e1e08ede5467df01eb71091976287e948a5694fd106934abe: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\GRAPH.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
2ca89680db88640e1e08ede5467df01eb71091976287e948a5694fd106934abe: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\GRAPH.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
2ca89680db88640e1e08ede5467df01eb71091976287e948a5694fd106934abe: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\GRAPH.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
09d1125d2b260e5efbb90831494acf79d4f7836d7d572f19ccfb020db79fc0cc: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
09d1125d2b260e5efbb90831494acf79d4f7836d7d572f19ccfb020db79fc0cc: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
09d1125d2b260e5efbb90831494acf79d4f7836d7d572f19ccfb020db79fc0cc: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
a4f6aa10ff4e7f72b4133aae045d7a952b2cb977c39b06bd4098775472e23b31: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateComRegisterShell64.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
a4f6aa10ff4e7f72b4133aae045d7a952b2cb977c39b06bd4098775472e23b31: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateComRegisterShell64.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
a4f6aa10ff4e7f72b4133aae045d7a952b2cb977c39b06bd4098775472e23b31: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateComRegisterShell64.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
38904906737e6ffbfc21388b58f3e7317901db2c63ce8673c840d382715a4301: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\nacl64.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
38904906737e6ffbfc21388b58f3e7317901db2c63ce8673c840d382715a4301: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\nacl64.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
38904906737e6ffbfc21388b58f3e7317901db2c63ce8673c840d382715a4301: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\nacl64.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
d36b2759072d0fe7ec16ac05fab33f611fcf68ae50386abeca465c0144cb5ce6: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\javaw.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
d36b2759072d0fe7ec16ac05fab33f611fcf68ae50386abeca465c0144cb5ce6: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\javaw.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
d36b2759072d0fe7ec16ac05fab33f611fcf68ae50386abeca465c0144cb5ce6: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\javaw.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
e06470a75246fc191359632c6a44fc8068b0be5c8d9636a9cf286d5f223df265: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\javaws.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
e06470a75246fc191359632c6a44fc8068b0be5c8d9636a9cf286d5f223df265: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\javaws.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
e06470a75246fc191359632c6a44fc8068b0be5c8d9636a9cf286d5f223df265: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\javaws.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
bc69f29c99ba922266b8cc924f79b7ea1af760caf5967d8a477c235b5100cc4d: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\DCF\Common.DBConnection.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
bc69f29c99ba922266b8cc924f79b7ea1af760caf5967d8a477c235b5100cc4d: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\DCF\Common.DBConnection.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
bc69f29c99ba922266b8cc924f79b7ea1af760caf5967d8a477c235b5100cc4d: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\DCF\Common.DBConnection.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
3a384bf218d9bcbd263d8e75122c3e013cce2d469969ca64201a12b5a0d57f5e: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\CNFNOT32.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
3a384bf218d9bcbd263d8e75122c3e013cce2d469969ca64201a12b5a0d57f5e: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\CNFNOT32.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
3a384bf218d9bcbd263d8e75122c3e013cce2d469969ca64201a12b5a0d57f5e: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\CNFNOT32.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
405b8bd647fa703e233b8b609a18999abe465a8458168f1daf23197bd2ea36aa: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
405b8bd647fa703e233b8b609a18999abe465a8458168f1daf23197bd2ea36aa: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
405b8bd647fa703e233b8b609a18999abe465a8458168f1daf23197bd2ea36aa: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
7042a901c2252ba6bf365e4201f02ff82ee37559a6ee82420815ca488f197adb: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\PPTICO.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
7042a901c2252ba6bf365e4201f02ff82ee37559a6ee82420815ca488f197adb: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\PPTICO.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
7042a901c2252ba6bf365e4201f02ff82ee37559a6ee82420815ca488f197adb: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\PPTICO.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
36941ee77b4639649baf92284962a43104b611bf3ad68493c782051b345919c6: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
36941ee77b4639649baf92284962a43104b611bf3ad68493c782051b345919c6: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
36941ee77b4639649baf92284962a43104b611bf3ad68493c782051b345919c6: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
d9b024fc13e5c9eaa55c3e54f5531e4bba239151b26891bb976008f89488f3a6: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Eula.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
d9b024fc13e5c9eaa55c3e54f5531e4bba239151b26891bb976008f89488f3a6: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Eula.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
d9b024fc13e5c9eaa55c3e54f5531e4bba239151b26891bb976008f89488f3a6: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Eula.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
6989b6d92369081c476c6f3104f63fed921e8bc0cfb6d59944f9975e1dada251: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
6989b6d92369081c476c6f3104f63fed921e8bc0cfb6d59944f9975e1dada251: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
6989b6d92369081c476c6f3104f63fed921e8bc0cfb6d59944f9975e1dada251: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
1f2ef97e5008fa58f91d86c8dbbe4165237cc77b2571ff7581c6d52c8bea6849: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
1f2ef97e5008fa58f91d86c8dbbe4165237cc77b2571ff7581c6d52c8bea6849: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
1f2ef97e5008fa58f91d86c8dbbe4165237cc77b2571ff7581c6d52c8bea6849: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
92e3b68fdfb0a486204c43a61ea15e5b432074e2409a5899e0b43ffb49a2c41e: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\VPREVIEW.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
92e3b68fdfb0a486204c43a61ea15e5b432074e2409a5899e0b43ffb49a2c41e: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\VPREVIEW.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
92e3b68fdfb0a486204c43a61ea15e5b432074e2409a5899e0b43ffb49a2c41e: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\VPREVIEW.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
03ccc2fe0524d882736ba7d7ac5115ec33f0f6e499dcd78a9e8d75726570608c: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
03ccc2fe0524d882736ba7d7ac5115ec33f0f6e499dcd78a9e8d75726570608c: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
03ccc2fe0524d882736ba7d7ac5115ec33f0f6e499dcd78a9e8d75726570608c: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
951fca7a8c754ab8aa868938cb801b6d9032e92cd36967381b217e6ee2ee17fd: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
951fca7a8c754ab8aa868938cb801b6d9032e92cd36967381b217e6ee2ee17fd: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
951fca7a8c754ab8aa868938cb801b6d9032e92cd36967381b217e6ee2ee17fd: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
7f46ec84f207fb41690096f53d0e488c936e4d14d7c600254c16cca357093930: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\OIS.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
7f46ec84f207fb41690096f53d0e488c936e4d14d7c600254c16cca357093930: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\OIS.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
7f46ec84f207fb41690096f53d0e488c936e4d14d7c600254c16cca357093930: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\OIS.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
7fbb1b25d4841731fe324e1f807cd8f151d603cdef4a70026f6320ed643512c5: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\unpack200.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
7fbb1b25d4841731fe324e1f807cd8f151d603cdef4a70026f6320ed643512c5: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\unpack200.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
7fbb1b25d4841731fe324e1f807cd8f151d603cdef4a70026f6320ed643512c5: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\unpack200.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
db928e672a516d236638d74ee4bb3c82677e65a30284fb2e6b04d98490018190: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\CLVIEW.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
db928e672a516d236638d74ee4bb3c82677e65a30284fb2e6b04d98490018190: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\CLVIEW.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
db928e672a516d236638d74ee4bb3c82677e65a30284fb2e6b04d98490018190: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\CLVIEW.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
706db4d832abdf4907a1386b917e553315660a59bfb4c180e38215b4a606d896: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\LICLUA.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
706db4d832abdf4907a1386b917e553315660a59bfb4c180e38215b4a606d896: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\LICLUA.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
706db4d832abdf4907a1386b917e553315660a59bfb4c180e38215b4a606d896: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\LICLUA.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
f8127a4e84379df6c62c12bd5888b8f1292e206349b387c3c66208e25d2e156d: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
f8127a4e84379df6c62c12bd5888b8f1292e206349b387c3c66208e25d2e156d: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
f8127a4e84379df6c62c12bd5888b8f1292e206349b387c3c66208e25d2e156d: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
3fd34edd0e16a6a340e2355b3d0c8bc84ec633f6b97aee5c2b3d9298cc804c9e: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\jabswitch.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
3fd34edd0e16a6a340e2355b3d0c8bc84ec633f6b97aee5c2b3d9298cc804c9e: Win.Trojan.Agent-6597676-0, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\jabswitch.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
3fd34edd0e16a6a340e2355b3d0c8bc84ec633f6b97aee5c2b3d9298cc804c9e: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\jabswitch.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
3fd34edd0e16a6a340e2355b3d0c8bc84ec633f6b97aee5c2b3d9298cc804c9e: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\jabswitch.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
71bb06eb150bf98a5e23c3fcd122bfca7a0bb706b60bb1731ecce19fc116ba46: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\protocolhandler.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
71bb06eb150bf98a5e23c3fcd122bfca7a0bb706b60bb1731ecce19fc116ba46: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\protocolhandler.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
71bb06eb150bf98a5e23c3fcd122bfca7a0bb706b60bb1731ecce19fc116ba46: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\protocolhandler.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
39cf89b83a9ce8be2eb244151e3893e8278b3ae9e48ce425701f6605e902702b: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSPUB.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
39cf89b83a9ce8be2eb244151e3893e8278b3ae9e48ce425701f6605e902702b: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSPUB.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
39cf89b83a9ce8be2eb244151e3893e8278b3ae9e48ce425701f6605e902702b: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSPUB.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
383dadc9b28021dd57534bb3e7cadff199b5cd6dce57d165fcaaba1093e0605e: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
383dadc9b28021dd57534bb3e7cadff199b5cd6dce57d165fcaaba1093e0605e: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
383dadc9b28021dd57534bb3e7cadff199b5cd6dce57d165fcaaba1093e0605e: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
6392a286f460ee4e898d56ff069fdcf149643ca1b07a1250a45ae4a3a12d1681: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateOnDemand.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
6392a286f460ee4e898d56ff069fdcf149643ca1b07a1250a45ae4a3a12d1681: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateOnDemand.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
6392a286f460ee4e898d56ff069fdcf149643ca1b07a1250a45ae4a3a12d1681: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateOnDemand.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
dfaaf5374746e9d343f989b04a978d0ca9b71cc562c419d20f746d0c10ee1334: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\elevation_service.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
dfaaf5374746e9d343f989b04a978d0ca9b71cc562c419d20f746d0c10ee1334: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\elevation_service.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
dfaaf5374746e9d343f989b04a978d0ca9b71cc562c419d20f746d0c10ee1334: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\elevation_service.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
ead58c483cb20bcd57464f8a4929079539d634f469b213054bf737d227c026dc: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\DW20.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
ead58c483cb20bcd57464f8a4929079539d634f469b213054bf737d227c026dc: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\DW20.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
ead58c483cb20bcd57464f8a4929079539d634f469b213054bf737d227c026dc: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\DW20.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
a6baa3c00718c55c7205e5c36f7627e89ec844b8dc42bfdabf70e6e527ba539b: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
a6baa3c00718c55c7205e5c36f7627e89ec844b8dc42bfdabf70e6e527ba539b: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
a6baa3c00718c55c7205e5c36f7627e89ec844b8dc42bfdabf70e6e527ba539b: Win.Malware.Ipamor-9624529-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
a6baa3c00718c55c7205e5c36f7627e89ec844b8dc42bfdabf70e6e527ba539b: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
8064fcf69919e89934381456d02792a26b96535cb70670e4f931487da6ae66be: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\AppSharingHookController.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
8064fcf69919e89934381456d02792a26b96535cb70670e4f931487da6ae66be: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\AppSharingHookController.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
8064fcf69919e89934381456d02792a26b96535cb70670e4f931487da6ae66be: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\AppSharingHookController.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
13e3c3ec96ad686c6f947a48e898964f3020fad5158fce41dd63c5c1a6a27f8c: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
13e3c3ec96ad686c6f947a48e898964f3020fad5158fce41dd63c5c1a6a27f8c: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
13e3c3ec96ad686c6f947a48e898964f3020fad5158fce41dd63c5c1a6a27f8c: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
e2e5d6609e560556006b00c9b77825c719a2dba3a2c67222091d59e71dbb5974: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\CNFNOT32.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
e2e5d6609e560556006b00c9b77825c719a2dba3a2c67222091d59e71dbb5974: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\CNFNOT32.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
e2e5d6609e560556006b00c9b77825c719a2dba3a2c67222091d59e71dbb5974: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\CNFNOT32.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
3411e5d169cd76209d01ca06771cfac461a52be34a7fee06cdf7f67819d6d54f: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\Installer\chrmstp.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
3411e5d169cd76209d01ca06771cfac461a52be34a7fee06cdf7f67819d6d54f: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\Installer\chrmstp.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
3411e5d169cd76209d01ca06771cfac461a52be34a7fee06cdf7f67819d6d54f: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\Installer\chrmstp.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
a369038ebebc5768ca448a006978e702f38af3a1765f4e1f6f52d1dffbfda101: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
a369038ebebc5768ca448a006978e702f38af3a1765f4e1f6f52d1dffbfda101: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
a369038ebebc5768ca448a006978e702f38af3a1765f4e1f6f52d1dffbfda101: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
c529533f216362cbf7c229263cce3aa0b93b84c1e9387c83b2f0f6bea2a1f5bb: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Oarpmany.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
c529533f216362cbf7c229263cce3aa0b93b84c1e9387c83b2f0f6bea2a1f5bb: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Oarpmany.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
c529533f216362cbf7c229263cce3aa0b93b84c1e9387c83b2f0f6bea2a1f5bb: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Oarpmany.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
1a362dccaceffa7a3756352c318d29ca56556653be79e5767141e908002e64fa: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\IEContentService.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
1a362dccaceffa7a3756352c318d29ca56556653be79e5767141e908002e64fa: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\IEContentService.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
1a362dccaceffa7a3756352c318d29ca56556653be79e5767141e908002e64fa: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\IEContentService.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
c2f902afd7a76ad59c9025bbe8180816905cc0b22c1cd8aea5acdf83aa61083a: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\XLICONS.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
c2f902afd7a76ad59c9025bbe8180816905cc0b22c1cd8aea5acdf83aa61083a: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\XLICONS.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
c2f902afd7a76ad59c9025bbe8180816905cc0b22c1cd8aea5acdf83aa61083a: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\XLICONS.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
d3f861995dbc5a573e2d34581de8372a97d2e69733aa05e53974f12d6e67e0fb: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Client\AppVLP.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
d3f861995dbc5a573e2d34581de8372a97d2e69733aa05e53974f12d6e67e0fb: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Client\AppVLP.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
d3f861995dbc5a573e2d34581de8372a97d2e69733aa05e53974f12d6e67e0fb: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Client\AppVLP.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
0d365ee501c96d9a391dbc81443ec14322bc9269ff07513051c44ecc055c1f4e: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateBroker.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
0d365ee501c96d9a391dbc81443ec14322bc9269ff07513051c44ecc055c1f4e: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateBroker.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
0d365ee501c96d9a391dbc81443ec14322bc9269ff07513051c44ecc055c1f4e: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateBroker.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
5ce6e8f18a6707a97be43d055bb733741695887d877f4dcd3ef88a2f5e48ca6c: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Client\AppVDllSurrogate64.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
5ce6e8f18a6707a97be43d055bb733741695887d877f4dcd3ef88a2f5e48ca6c: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Client\AppVDllSurrogate64.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
5ce6e8f18a6707a97be43d055bb733741695887d877f4dcd3ef88a2f5e48ca6c: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Client\AppVDllSurrogate64.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
cae73f579399bb2119ddc9b2a15ec58724a80d42859c1bfc80ca02ee2c0c52f7: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Client\AppVDllSurrogate32.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
cae73f579399bb2119ddc9b2a15ec58724a80d42859c1bfc80ca02ee2c0c52f7: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Client\AppVDllSurrogate32.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
cae73f579399bb2119ddc9b2a15ec58724a80d42859c1bfc80ca02ee2c0c52f7: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Client\AppVDllSurrogate32.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
16399a04cdd45dad53bd19739a866b7d699b5d3d95c504a1f6bc8a911ca79b36: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroBroker.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
16399a04cdd45dad53bd19739a866b7d699b5d3d95c504a1f6bc8a911ca79b36: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroBroker.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
16399a04cdd45dad53bd19739a866b7d699b5d3d95c504a1f6bc8a911ca79b36: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroBroker.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
2ff8950af922d893e49d05940a8636307988e76120072a13eee140b32a54f80e: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\javacpl.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
2ff8950af922d893e49d05940a8636307988e76120072a13eee140b32a54f80e: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\javacpl.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
2ff8950af922d893e49d05940a8636307988e76120072a13eee140b32a54f80e: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\javacpl.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
1d0729d0bb425f5fd2b761e6edd3140a10ea60c71d502bc7d1c127c31d468e7b: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
1d0729d0bb425f5fd2b761e6edd3140a10ea60c71d502bc7d1c127c31d468e7b: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
1d0729d0bb425f5fd2b761e6edd3140a10ea60c71d502bc7d1c127c31d468e7b: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
ebe870d132348c9583015175262c82631c994c853feeb181e5f37a93354f0d8a: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSOHTMED.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
ebe870d132348c9583015175262c82631c994c853feeb181e5f37a93354f0d8a: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSOHTMED.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
ebe870d132348c9583015175262c82631c994c853feeb181e5f37a93354f0d8a: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSOHTMED.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
083df2176819c7467c2927c0f3ad03f816d7987f6ec6ed669c80c2ae1ecc7aad: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSOUC.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
083df2176819c7467c2927c0f3ad03f816d7987f6ec6ed669c80c2ae1ecc7aad: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSOUC.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
083df2176819c7467c2927c0f3ad03f816d7987f6ec6ed669c80c2ae1ecc7aad: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSOUC.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
c71d170fa6fad768bbc2894759ac17fccf7755f938051d19e58c3c9084e841e8: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
c71d170fa6fad768bbc2894759ac17fccf7755f938051d19e58c3c9084e841e8: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
c71d170fa6fad768bbc2894759ac17fccf7755f938051d19e58c3c9084e841e8: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
1d0257832d2dca39715c01ba023a8757723ce238462f3de49f07b195dc78d939: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Setup.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
1d0257832d2dca39715c01ba023a8757723ce238462f3de49f07b195dc78d939: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Setup.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
1d0257832d2dca39715c01ba023a8757723ce238462f3de49f07b195dc78d939: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Setup.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
adff1766f17c7403a1220d9614df7ec129b58282b3f91e7a08a33dd255778e15: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Integration\Integrator.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
adff1766f17c7403a1220d9614df7ec129b58282b3f91e7a08a33dd255778e15: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Integration\Integrator.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
adff1766f17c7403a1220d9614df7ec129b58282b3f91e7a08a33dd255778e15: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Integration\Integrator.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
d154153bc4362d00344a75c956b21c9860800b4d58696d13388e0e063ae5a184: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLED.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
d154153bc4362d00344a75c956b21c9860800b4d58696d13388e0e063ae5a184: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLED.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
d154153bc4362d00344a75c956b21c9860800b4d58696d13388e0e063ae5a184: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLED.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
497fb393a4c7cd4cbc52339d95107829f5a19db6673a9288f8fec5e26c1f9e4a: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\SELFCERT.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
497fb393a4c7cd4cbc52339d95107829f5a19db6673a9288f8fec5e26c1f9e4a: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\SELFCERT.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
497fb393a4c7cd4cbc52339d95107829f5a19db6673a9288f8fec5e26c1f9e4a: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\SELFCERT.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
bb29f10916d108f00f88eff540d07ee5fea420f84dc6825df76191f18ba50197: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE16\LICLUA.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
bb29f10916d108f00f88eff540d07ee5fea420f84dc6825df76191f18ba50197: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE16\LICLUA.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
bb29f10916d108f00f88eff540d07ee5fea420f84dc6825df76191f18ba50197: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE16\LICLUA.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
8b86b48932382fc470c0902caf19152095826805c32ba4ab3e4498eb1d84a0b9: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\arh.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
8b86b48932382fc470c0902caf19152095826805c32ba4ab3e4498eb1d84a0b9: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\arh.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
8b86b48932382fc470c0902caf19152095826805c32ba4ab3e4498eb1d84a0b9: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\arh.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
c37ad80498b3ba21f88a1b619047f9062ee2a14905064b0680460fe96cc3e59f: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSQRY32.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
c37ad80498b3ba21f88a1b619047f9062ee2a14905064b0680460fe96cc3e59f: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSQRY32.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
c37ad80498b3ba21f88a1b619047f9062ee2a14905064b0680460fe96cc3e59f: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\MSQRY32.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
14c35c805bda07c5554c3e11072bf391a6d6968aa8e603ce2409a49920c72ad5: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\wow_helper.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
14c35c805bda07c5554c3e11072bf391a6d6968aa8e603ce2409a49920c72ad5: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\wow_helper.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
14c35c805bda07c5554c3e11072bf391a6d6968aa8e603ce2409a49920c72ad5: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\wow_helper.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
0442090bbcc2ee4cdf1953d6ab1fe80f6b3c78a3f30f4dd3e6ff99b649e81405: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office16\OSPPREARM.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
0442090bbcc2ee4cdf1953d6ab1fe80f6b3c78a3f30f4dd3e6ff99b649e81405: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office16\OSPPREARM.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
0442090bbcc2ee4cdf1953d6ab1fe80f6b3c78a3f30f4dd3e6ff99b649e81405: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office16\OSPPREARM.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
2ccb6d30a3e96fd6e10e313b1ef44745ea00839cfe541a70d5db29439fddecf7: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\java.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
2ccb6d30a3e96fd6e10e313b1ef44745ea00839cfe541a70d5db29439fddecf7: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\java.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
2ccb6d30a3e96fd6e10e313b1ef44745ea00839cfe541a70d5db29439fddecf7: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\java.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
6f368768df55b8caba8ba93a18c984466d66c19275cb5f795e54cedbe0b7d3d3: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdate.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
6f368768df55b8caba8ba93a18c984466d66c19275cb5f795e54cedbe0b7d3d3: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdate.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
6f368768df55b8caba8ba93a18c984466d66c19275cb5f795e54cedbe0b7d3d3: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdate.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
9fc142bfc15e5de17947ffefd7a8fa43e5929fca10a31feaf0fee8ab5b1eb555: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOICONS.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
9fc142bfc15e5de17947ffefd7a8fa43e5929fca10a31feaf0fee8ab5b1eb555: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOICONS.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
9fc142bfc15e5de17947ffefd7a8fa43e5929fca10a31feaf0fee8ab5b1eb555: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOICONS.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
68601b452f267844c3c78e87a2dd2189b4044ebbda1e32da2ba1413352249a40: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\FLTLDR.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
68601b452f267844c3c78e87a2dd2189b4044ebbda1e32da2ba1413352249a40: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\FLTLDR.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
68601b452f267844c3c78e87a2dd2189b4044ebbda1e32da2ba1413352249a40: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\FLTLDR.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
4647c7fcbaceef926633d1bfa117630e1597034c35a4f0abee6be47e44cad3b8: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\misc.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
4647c7fcbaceef926633d1bfa117630e1597034c35a4f0abee6be47e44cad3b8: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\misc.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
4647c7fcbaceef926633d1bfa117630e1597034c35a4f0abee6be47e44cad3b8: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\misc.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
6942c68fea0e06a6a13e6a14231bdfd95afa964d15b60a9c79674b1b45b93bd6: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroTextExtractor.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
6942c68fea0e06a6a13e6a14231bdfd95afa964d15b60a9c79674b1b45b93bd6: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroTextExtractor.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
6942c68fea0e06a6a13e6a14231bdfd95afa964d15b60a9c79674b1b45b93bd6: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroTextExtractor.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
aff73ae0abcaf0cf94eaba5746806dba25cb33e57edaf8594a9ea685d2a7ec17: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\ssvagent.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
aff73ae0abcaf0cf94eaba5746806dba25cb33e57edaf8594a9ea685d2a7ec17: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\ssvagent.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
aff73ae0abcaf0cf94eaba5746806dba25cb33e57edaf8594a9ea685d2a7ec17: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Java\jre7\bin\ssvagent.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
66ea19cae95aec6a6e318b94d27739c81922241cd09707687be788fe8e7a9944: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleCrashHandler64.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
66ea19cae95aec6a6e318b94d27739c81922241cd09707687be788fe8e7a9944: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleCrashHandler64.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
66ea19cae95aec6a6e318b94d27739c81922241cd09707687be788fe8e7a9944: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleCrashHandler64.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
908025609630282d93ca9d63dec2db25af9bb375a598173c6e16b1f83ac886f0: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft\Skype for Desktop\unins000.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
908025609630282d93ca9d63dec2db25af9bb375a598173c6e16b1f83ac886f0: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft\Skype for Desktop\unins000.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
908025609630282d93ca9d63dec2db25af9bb375a598173c6e16b1f83ac886f0: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft\Skype for Desktop\unins000.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
3b495d27c966ac8bd2941e3fc102d977316dd0ff7bc4ba8e957ee16c2b7beb03: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroExt\AcroExt.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
3b495d27c966ac8bd2941e3fc102d977316dd0ff7bc4ba8e957ee16c2b7beb03: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroExt\AcroExt.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
3b495d27c966ac8bd2941e3fc102d977316dd0ff7bc4ba8e957ee16c2b7beb03: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroExt\AcroExt.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
6cf8ce722f47740a6dfc4e44462358a3a8c34b14512d1c4a172d33f1e71d7986: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
6cf8ce722f47740a6dfc4e44462358a3a8c34b14512d1c4a172d33f1e71d7986: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
6cf8ce722f47740a6dfc4e44462358a3a8c34b14512d1c4a172d33f1e71d7986: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
502e516139f259bb9cae85d90f27576ac38868e2d8feb74b0b2b834336c83699: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
502e516139f259bb9cae85d90f27576ac38868e2d8feb74b0b2b834336c83699: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
502e516139f259bb9cae85d90f27576ac38868e2d8feb74b0b2b834336c83699: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
e4d7864672457c7bafdec54d2ade0b5c87dd59f3cc54a3c2c2ed572238e948aa: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\CLVIEW.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
e4d7864672457c7bafdec54d2ade0b5c87dd59f3cc54a3c2c2ed572238e948aa: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\CLVIEW.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
e4d7864672457c7bafdec54d2ade0b5c87dd59f3cc54a3c2c2ed572238e948aa: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\root\Office16\CLVIEW.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
00f60b26237da893648f5915073fb2f76e2bd06eed61467c016f1a109ee59692: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\1033\ONELEV.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
00f60b26237da893648f5915073fb2f76e2bd06eed61467c016f1a109ee59692: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\1033\ONELEV.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
00f60b26237da893648f5915073fb2f76e2bd06eed61467c016f1a109ee59692: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\1033\ONELEV.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
1b44594e77fa8c7f6aad74994f049399042252a321ec993334aa9ccf05202d70: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv\Wkconv.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
1b44594e77fa8c7f6aad74994f049399042252a321ec993334aa9ccf05202d70: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv\Wkconv.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
1b44594e77fa8c7f6aad74994f049399042252a321ec993334aa9ccf05202d70: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv\Wkconv.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
32828c542c3e54bd2b3139af356cd2f505d28ca90a18f8f48c51486fd9c6e1e4: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
32828c542c3e54bd2b3139af356cd2f505d28ca90a18f8f48c51486fd9c6e1e4: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
32828c542c3e54bd2b3139af356cd2f505d28ca90a18f8f48c51486fd9c6e1e4: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe, type:PE32 executable (GUI) Intel 80386, for MS Windows
f884123edddd538f6df61473c233af21e8555363cf91f7e1dd23243be8ebdf78: Win.Trojan.Neshuta-1, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\WORDICON.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
f884123edddd538f6df61473c233af21e8555363cf91f7e1dd23243be8ebdf78: Win.Virus.Neshta-7101689-0, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\WORDICON.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
f884123edddd538f6df61473c233af21e8555363cf91f7e1dd23243be8ebdf78: Win.Trojan.Jadtre-5, dropped, guest_paths:C:\Program Files (x86)\Microsoft Office\Office14\WORDICON.EXE, type:PE32 executable (GUI) Intel 80386, for MS Windows
Anomalous binary characteristics
anomaly: Timestamp on binary predates the release date of the OS version it requires by at least a year
Creates known Neshta virus mutexes

Screenshots


Hosts

Direct IP Country Name
Y 8.8.8.8 [VT] United States
Y 1.1.1.1 [VT] Australia

DNS

No domains contacted.


Summary

C:\Users\Louise\AppData\Local\Temp\c37.exe
C:\Users\Louise\AppData\Local\Temp\3582-490
C:\Users\Louise\AppData\Local\Temp
C:\Users\Louise\AppData\Local\Temp\3582-490\*.*
C:\Users\Louise\AppData\Local\Temp\3582-490\c37.exe
C:\Users\Louise\AppData\Local\Temp\
C:\Windows\Globalization\Sorting\sortdefault.nls
\??\MountPointManager
C:\Windows\directx.sys
C:\Windows\svchost.com
C:\Users\Louise\AppData\Local\Temp\tmp5023.tmp
C:\*.*
C:\$Recycle.Bin\*.*
C:\$Recycle.Bin\S-1-5-21-1339698970-4093829097-1161395185-1000\*.*
C:\Config.Msi\*.*
C:\Documents and Settings\*.*
C:\MSOCache\*.*
C:\MSOCache\All Users\*.*
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\*.*
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\ose.exe
C:\MSOCache\All Users
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\setup.exe
C:\MSOCache\All Users\{90140000-0016-0409-0000-0000000FF1CE}-C\*.*
C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\*.*
C:\MSOCache\All Users\{90140000-0019-0409-0000-0000000FF1CE}-C\*.*
C:\MSOCache\All Users\{90140000-001A-0409-0000-0000000FF1CE}-C\*.*
C:\MSOCache\All Users\{90140000-001B-0409-0000-0000000FF1CE}-C\*.*
C:\MSOCache\All Users\{90140000-002C-0409-0000-0000000FF1CE}-C\*.*
C:\MSOCache\All Users\{90140000-002C-0409-0000-0000000FF1CE}-C\Proof.en\*.*
C:\MSOCache\All Users\{90140000-002C-0409-0000-0000000FF1CE}-C\Proof.es\*.*
C:\MSOCache\All Users\{90140000-002C-0409-0000-0000000FF1CE}-C\Proof.fr\*.*
C:\MSOCache\All Users\{90140000-0044-0409-0000-0000000FF1CE}-C\*.*
C:\MSOCache\All Users\{90140000-00A1-0409-0000-0000000FF1CE}-C\*.*
C:\MSOCache\All Users\{90140000-00BA-0409-0000-0000000FF1CE}-C\*.*
C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\*.*
C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\1033\*.*
C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\DW20.EXE
C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C
C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\dwtrig20.exe
C:\MSOCache\All Users\{90140000-0116-0409-1000-0000000FF1CE}-C\*.*
C:\MSOCache\All Users\{90140000-0117-0409-0000-0000000FF1CE}-C\*.*
C:\MSOCache\All Users\{90140000-0117-0409-0000-0000000FF1CE}-C\Access.en-us\*.*
C:\PerfLogs\*.*
C:\PerfLogs\Admin\*.*
C:\Program Files\*.*
C:\Program Files\7-Zip\*.*
C:\Program Files\7-Zip\7z.exe
C:\Program Files
C:\Program Files\7-Zip\7zFM.exe
C:\Program Files\7-Zip\7zG.exe
C:\Program Files\7-Zip\Lang\*.*
C:\Program Files\7-Zip\Uninstall.exe
C:\Program Files\Common Files\*.*
C:\Program Files\Common Files\Microsoft Shared\*.*
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\*.*
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\appvcleaner.exe
C:\Program Files\Common Files
C:\Program Files\Common Files\Microsoft Shared
C:\Program Files\Common Files\Microsoft Shared\ClickToRun
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\InspectorOfficeGadget.exe
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\IntegratedOffice.exe
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\MavInject32.exe
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\*.*
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.12430.20288\*.*
C:\Program Files\Common Files\Microsoft Shared\Filters\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe
C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe
C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\HWRCustomization\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\InkWatson.exe
C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe
C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe
C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe
C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\*.*
C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW\*.*
C:\Program Files\Common Files\Microsoft Shared\MSInfo\*.*
C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\*.*
C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\*.*
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\*.*
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\*.*
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform
C:\Program Files\Common Files\Microsoft Shared\Stationery\*.*
C:\Program Files\Common Files\Microsoft Shared\TextConv\*.*
C:\Program Files\Common Files\Microsoft Shared\TextConv\en-US\*.*
C:\Program Files\Common Files\Microsoft Shared\Triedit\*.*
C:\Program Files\Common Files\Microsoft Shared\Triedit\en-US\*.*
C:\Program Files\Common Files\Microsoft Shared\VC\*.*
C:\Program Files\Common Files\Microsoft Shared\VGX\*.*
C:\Program Files\Common Files\Microsoft Shared\VSTO\*.*
C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\*.*
C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\*.*
C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe
C:\Program Files\Common Files\Services\*.*
C:\Program Files\Common Files\SpeechEngines\*.*
C:\Program Files\Common Files\SpeechEngines\Microsoft\*.*
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\*.*
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\*.*
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\*.*
C:\Program Files\Common Files\System\*.*
C:\Program Files\Common Files\System\ado\*.*
C:\Program Files\Common Files\System\ado\en-US\*.*
C:\Program Files\Common Files\System\en-US\*.*
C:\Program Files\Common Files\System\msadc\*.*
C:\Program Files\Common Files\System\msadc\en-US\*.*
C:\Program Files\Common Files\System\Ole DB\*.*
C:\Program Files\Common Files\System\Ole DB\en-US\*.*
C:\Program Files\DVD Maker\*.*
C:\Program Files\DVD Maker\DVDMaker.exe
C:\Program Files\DVD Maker
C:\Program Files\DVD Maker\en-US\*.*
C:\Program Files\DVD Maker\Shared\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\Full\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\Push\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\*.*
C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\*.*
C:\Program Files\FileZilla FTP Client\*.*
C:\Program Files\FileZilla FTP Client\docs\*.*
C:\Program Files\FileZilla FTP Client\filezilla.exe
C:\Program Files\FileZilla FTP Client
C:\Program Files\FileZilla FTP Client\fzputtygen.exe
C:\Program Files\FileZilla FTP Client\fzsftp.exe
C:\Program Files\FileZilla FTP Client\fzstorj.exe
C:\Program Files\FileZilla FTP Client\locales\*.*
C:\Program Files\FileZilla FTP Client\locales\an\*.*
C:\Program Files\FileZilla FTP Client\locales\ar\*.*
C:\Program Files\FileZilla FTP Client\locales\az\*.*
C:\Program Files\FileZilla FTP Client\locales\bg_BG\*.*
C:\Program Files\FileZilla FTP Client\locales\ca\*.*
C:\Program Files\FileZilla FTP Client\locales\[email protected]\*.*
C:\Program Files\FileZilla FTP Client\locales\co\*.*
C:\Program Files\FileZilla FTP Client\locales\cs_CZ\*.*
C:\Program Files\FileZilla FTP Client\locales\cy\*.*
C:\Program Files\FileZilla FTP Client\locales\da\*.*
C:\Program Files\FileZilla FTP Client\locales\de\*.*
C:\Program Files\FileZilla FTP Client\locales\el\*.*
C:\Program Files\FileZilla FTP Client\locales\es\*.*
C:\Program Files\FileZilla FTP Client\locales\et\*.*
C:\Program Files\FileZilla FTP Client\locales\eu\*.*
C:\Program Files\FileZilla FTP Client\locales\fa_IR\*.*
C:\Program Files\FileZilla FTP Client\locales\fi_FI\*.*
C:\Program Files\FileZilla FTP Client\locales\fr\*.*
C:\Program Files\FileZilla FTP Client\locales\gl_ES\*.*
C:\Program Files\FileZilla FTP Client\locales\he_IL\*.*
C:\Program Files\FileZilla FTP Client\locales\hr\*.*
C:\Program Files\FileZilla FTP Client\locales\hu_HU\*.*
C:\Program Files\FileZilla FTP Client\locales\hy\*.*
C:\Program Files\FileZilla FTP Client\locales\id_ID\*.*
C:\Program Files\FileZilla FTP Client\locales\is\*.*
C:\Program Files\FileZilla FTP Client\locales\it\*.*
C:\Program Files\FileZilla FTP Client\locales\ja_JP\*.*
C:\Program Files\FileZilla FTP Client\locales\ka\*.*
C:\Program Files\FileZilla FTP Client\locales\kab\*.*
C:\Program Files\FileZilla FTP Client\locales\km_KH\*.*
C:\Program Files\FileZilla FTP Client\locales\ko_KR\*.*
C:\Program Files\FileZilla FTP Client\locales\ku\*.*
C:\Program Files\FileZilla FTP Client\locales\ky\*.*
C:\Program Files\FileZilla FTP Client\locales\lo_LA\*.*
C:\Program Files\FileZilla FTP Client\locales\lt_LT\*.*
C:\Program Files\FileZilla FTP Client\locales\lv_LV\*.*
C:\Program Files\FileZilla FTP Client\locales\mk_MK\*.*
C:\Program Files\FileZilla FTP Client\locales\nb_NO\*.*
C:\Program Files\FileZilla FTP Client\locales\ne\*.*
C:\Program Files\FileZilla FTP Client\locales\nl\*.*
C:\Program Files\FileZilla FTP Client\locales\nn_NO\*.*
C:\Program Files\FileZilla FTP Client\locales\oc\*.*
C:\Program Files\FileZilla FTP Client\locales\pl_PL\*.*
C:\Program Files\FileZilla FTP Client\locales\pt_BR\*.*
C:\Program Files\FileZilla FTP Client\locales\pt_PT\*.*
C:\Program Files\FileZilla FTP Client\locales\ro_RO\*.*
C:\Program Files\FileZilla FTP Client\locales\ru\*.*
C:\Program Files\FileZilla FTP Client\locales\sk_SK\*.*
C:\Program Files\FileZilla FTP Client\locales\sl_SI\*.*
C:\Program Files\FileZilla FTP Client\locales\sr\*.*
C:\Program Files\FileZilla FTP Client\locales\sv\*.*
C:\Program Files\FileZilla FTP Client\locales\th_TH\*.*
C:\Program Files\FileZilla FTP Client\locales\tr\*.*
C:\Program Files\FileZilla FTP Client\locales\uk_UA\*.*
C:\Program Files\FileZilla FTP Client\locales\vi_VN\*.*
C:\Program Files\FileZilla FTP Client\locales\zh_CN\*.*
C:\Program Files\FileZilla FTP Client\locales\zh_TW\*.*
C:\Program Files\FileZilla FTP Client\resources\*.*
C:\Program Files\FileZilla FTP Client\resources\16x16\*.*
C:\Program Files\FileZilla FTP Client\resources\20x20\*.*
C:\Program Files\FileZilla FTP Client\resources\24x24\*.*
C:\Program Files\FileZilla FTP Client\resources\32x32\*.*
C:\Program Files\FileZilla FTP Client\resources\480x480\*.*
C:\Program Files\FileZilla FTP Client\resources\48x48\*.*
C:\Program Files\FileZilla FTP Client\resources\blukis\*.*
C:\Program Files\FileZilla FTP Client\resources\blukis\16x16\*.*
C:\Program Files\FileZilla FTP Client\resources\blukis\32x32\*.*
C:\Program Files\FileZilla FTP Client\resources\blukis\48x48\*.*
C:\Program Files\FileZilla FTP Client\resources\classic\*.*
C:\Program Files\FileZilla FTP Client\resources\classic\16x16\*.*
C:\Program Files\FileZilla FTP Client\resources\cyril\*.*
C:\Program Files\FileZilla FTP Client\resources\cyril\16x16\*.*
C:\Program Files\FileZilla FTP Client\resources\default\*.*
C:\Program Files\FileZilla FTP Client\resources\default\480x480\*.*
C:\Program Files\FileZilla FTP Client\resources\flatzilla\*.*
C:\Program Files\FileZilla FTP Client\resources\flatzilla\16x16\*.*
C:\Program Files\FileZilla FTP Client\resources\flatzilla\24x24\*.*
C:\Program Files\FileZilla FTP Client\resources\flatzilla\32x32\*.*
C:\Program Files\FileZilla FTP Client\resources\flatzilla\48x48\*.*
C:\Program Files\FileZilla FTP Client\resources\lone\*.*
C:\Program Files\FileZilla FTP Client\resources\lone\16x16\*.*
C:\Program Files\FileZilla FTP Client\resources\lone\32x32\*.*
C:\Program Files\FileZilla FTP Client\resources\lone\48x48\*.*
C:\Program Files\FileZilla FTP Client\resources\minimal\*.*
C:\Program Files\FileZilla FTP Client\resources\minimal\16x16\*.*
C:\Program Files\FileZilla FTP Client\resources\minimal\32x32\*.*
C:\Program Files\FileZilla FTP Client\resources\opencrystal\*.*
C:\Program Files\FileZilla FTP Client\resources\opencrystal\16x16\*.*
C:\Program Files\FileZilla FTP Client\resources\opencrystal\20x20\*.*
C:\Program Files\FileZilla FTP Client\resources\opencrystal\24x24\*.*
C:\Program Files\FileZilla FTP Client\resources\opencrystal\32x32\*.*
C:\Program Files\FileZilla FTP Client\resources\opencrystal\48x48\*.*
C:\Program Files\FileZilla FTP Client\resources\sun\*.*
C:\Program Files\FileZilla FTP Client\resources\sun\48x48\*.*
C:\Program Files\FileZilla FTP Client\resources\tango\*.*
C:\Program Files\FileZilla FTP Client\resources\tango\16x16\*.*
C:\Program Files\FileZilla FTP Client\resources\tango\32x32\*.*
C:\Program Files\FileZilla FTP Client\resources\tango\48x48\*.*
C:\Program Files\FileZilla FTP Client\resources\xrc\*.*
C:\Program Files\FileZilla FTP Client\uninstall.exe
C:\Program Files\GIMP 2\*.*
C:\Program Files\GIMP 2\32\*.*
C:\Program Files\GIMP 2\32\bin\*.*
C:\Program Files\GIMP 2\32\bin\gspawn-win32-helper-console.exe
C:\Program Files\GIMP 2
C:\Program Files\GIMP 2\32\bin\gspawn-win32-helper.exe
C:\Program Files\GIMP 2\32\bin\python.exe
C:\Program Files\GIMP 2\32\bin\pythonw.exe
C:\Program Files\GIMP 2\32\etc\*.*
C:\Program Files\GIMP 2\32\etc\fonts\*.*
C:\Program Files\GIMP 2\32\etc\fonts\conf.d\*.*
C:\Program Files\GIMP 2\32\etc\gtk-2.0\*.*
C:\Program Files\GIMP 2\32\lib\*.*
C:\Program Files\GIMP 2\32\lib\gdk-pixbuf-2.0\*.*
C:\Program Files\GIMP 2\32\lib\gdk-pixbuf-2.0\2.10.0\*.*
C:\Program Files\GIMP 2\32\lib\gdk-pixbuf-2.0\2.10.0\loaders\*.*
C:\Program Files\GIMP 2\32\lib\gimp\*.*
C:\Program Files\GIMP 2\32\lib\gimp\2.0\*.*
C:\Program Files\GIMP 2\32\lib\gimp\2.0\python\*.*
C:\Program Files\GIMP 2\32\lib\gtk-2.0\*.*
C:\Program Files\GIMP 2\32\lib\gtk-2.0\2.10.0\*.*
C:\Program Files\GIMP 2\32\lib\gtk-2.0\2.10.0\engines\*.*
C:\Program Files\GIMP 2\32\lib\gtk-2.0\2.10.0\loaders\*.*
C:\Program Files\GIMP 2\32\lib\gtk-2.0\modules\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\bsddb\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\bsddb\test\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\compiler\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\config\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\ctypes\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\ctypes\macholib\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\ctypes\test\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\curses\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\distutils\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\distutils\command\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\distutils\command\wininst-6.0.exe
C:\Program Files\GIMP 2\32\lib\python2.7\distutils
C:\Program Files\GIMP 2\32\lib\python2.7\distutils\command\wininst-7.1.exe
C:\Program Files\GIMP 2\32\lib\python2.7\distutils\command\wininst-8.0.exe
C:\Program Files\GIMP 2\32\lib\python2.7\distutils\command\wininst-9.0-amd64.exe
C:\Program Files\GIMP 2\32\lib\python2.7\distutils\command\wininst-9.0.exe
C:\Program Files\GIMP 2\32\lib\python2.7\distutils\tests\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\email\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\email\mime\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\email\test\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\email\test\data\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\encodings\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\ensurepip\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\ensurepip\_bundled\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\hotshot\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\idlelib\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\idlelib\Icons\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\idlelib\idle_test\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\importlib\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\json\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\json\tests\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\lib-dynload\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\lib-tk\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\lib-tk\test\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\lib-tk\test\test_tkinter\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\lib-tk\test\test_ttk\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\lib2to3\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\lib2to3\fixes\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\lib2to3\pgen2\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\lib2to3\tests\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\lib2to3\tests\data\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\lib2to3\tests\data\fixers\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\lib2to3\tests\data\fixers\myfixes\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\logging\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\msilib\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\multiprocessing\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\multiprocessing\dummy\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\plat-win32\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\pydoc_data\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\appdirs-1.4.3-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\cachecontrol\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\cachecontrol\caches\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\CacheControl-0.12.5-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\cairo\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\cairo\include\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\certifi\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\certifi-2018.10.15-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\chardet\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\chardet\cli\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\chardet-3.0.4-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\colorama\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\colorama-0.4.0-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\distlib\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\distlib\t32.exe
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\distlib\t64.exe
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\distlib\w32.exe
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\distlib\w64.exe
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\distlib\_backport\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\gi\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\gi\overrides\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\glib\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\gobject\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\gtk-2.0\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\gtk-2.0\gio\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\gtk-2.0\gtk\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\html5lib\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\html5lib\filters\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\html5lib\treeadapters\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\html5lib\treebuilders\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\html5lib\treewalkers\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\html5lib\_trie\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\html5lib-1.0.1-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\idna\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\idna-2.7-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\ipaddress-1.0.22-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\lockfile\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\lockfile-0.12.2-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\msgpack\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\msgpack-0.5.6-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\packaging\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\packaging-18.0-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pip\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pip\_internal\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pip\_internal\commands\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pip\_internal\models\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pip\_internal\operations\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pip\_internal\req\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pip\_internal\utils\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pip\_internal\vcs\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pip\_vendor\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pip-18.0-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pkg_resources\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pkg_resources\extern\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pkg_resources\_vendor\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pkg_resources\_vendor\packaging\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\progress\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\progress-1.4-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pycairo-1.17.1-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pyconsole\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pyconsole-0.5-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pyparsing-2.3.0-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pytoml\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\pytoml-0.1.20-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\requests\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\requests-2.20.0-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\retrying-1.3.3-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\setuptools\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\setuptools\cli-32.exe
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\setuptools
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\setuptools\cli-64.exe
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\setuptools\cli.exe
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\setuptools\command\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\setuptools\extern\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\setuptools\gui-32.exe
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\setuptools\gui-64.exe
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\setuptools\gui.exe
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\setuptools\_vendor\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\setuptools\_vendor\packaging\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\setuptools-40.5.0-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\six-1.11.0-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\tests\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\urllib3\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\urllib3\contrib\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\urllib3\contrib\_securetransport\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\urllib3\packages\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\urllib3\packages\backports\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\urllib3\packages\ssl_match_hostname\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\urllib3\util\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\urllib3-1.24.1-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\webencodings\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\site-packages\webencodings-0.5.1-py2.7.egg-info\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\sqlite3\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\sqlite3\test\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\test\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\test\audiodata\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\test\capath\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\test\cjkencodings\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\test\data\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\test\decimaltestdata\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\test\imghdrdata\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\test\subprocessdata\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\test\support\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\test\tracedmodules\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\test\xmltestdata\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\Tools\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\Tools\i18n\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\Tools\scripts\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\unittest\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\unittest\test\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\wsgiref\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\xml\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\xml\dom\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\xml\etree\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\xml\parsers\*.*
C:\Program Files\GIMP 2\32\lib\python2.7\xml\sax\*.*
C:\Program Files\GIMP 2\32\share\*.*
C:\Program Files\GIMP 2\32\share\themes\*.*
C:\Program Files\GIMP 2\32\share\themes\Default\*.*
C:\Program Files\GIMP 2\32\share\themes\Default\gtk-2.0-key\*.*
C:\Program Files\GIMP 2\32\share\themes\Emacs\*.*
C:\Program Files\GIMP 2\32\share\themes\Emacs\gtk-2.0-key\*.*
C:\Program Files\GIMP 2\32\share\themes\MS-Windows\*.*
C:\Program Files\GIMP 2\32\share\themes\MS-Windows\gtk-2.0\*.*
C:\Program Files\GIMP 2\32\share\themes\Raleigh\*.*
C:\Program Files\GIMP 2\32\share\themes\Raleigh\gtk-2.0\*.*
C:\Program Files\GIMP 2\bin\*.*
C:\Program Files\GIMP 2\bin\.debug\*.*
C:\Program Files\GIMP 2\bin\bzip2.exe
C:\Program Files\GIMP 2\bin\gdk-pixbuf-query-loaders.exe
C:\Program Files\GIMP 2\bin\gimp-2.10.exe
C:\Program Files\GIMP 2\bin\gimp-console-2.10.exe
C:\Program Files\GIMP 2\bin\gimp-debug-resume.exe
C:\Program Files\GIMP 2\bin\gimp-debug-tool-2.0.exe
C:\Program Files\GIMP 2\bin\gimp-test-clipboard-2.0.exe
C:\Program Files\GIMP 2\bin\gimptool-2.0.exe
C:\Program Files\GIMP 2\bin\gspawn-win64-helper-console.exe
C:\Program Files\GIMP 2\bin\gspawn-win64-helper.exe
C:\Program Files\GIMP 2\etc\*.*
C:\Program Files\GIMP 2\etc\fonts\*.*
C:\Program Files\GIMP 2\etc\fonts\conf.d\*.*
C:\Program Files\GIMP 2\etc\gimp\*.*
C:\Program Files\GIMP 2\etc\gimp\2.0\*.*
C:\Program Files\GIMP 2\etc\gtk-2.0\*.*
C:\Program Files\GIMP 2\lib\*.*
C:\Program Files\GIMP 2\lib\babl-0.1\*.*
C:\Program Files\GIMP 2\lib\babl-0.1\.debug\*.*
C:\Program Files\GIMP 2\lib\gdk-pixbuf-2.0\*.*
C:\Program Files\GIMP 2\lib\gdk-pixbuf-2.0\2.10.0\*.*
C:\Program Files\GIMP 2\lib\gdk-pixbuf-2.0\2.10.0\loaders\*.*
C:\Program Files\GIMP 2\lib\gegl-0.4\*.*
C:\Program Files\GIMP 2\lib\gegl-0.4\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\environ\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\interpreters\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\modules\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\modules\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\align-layers\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\align-layers\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\align-layers\align-layers.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\align-layers
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\animation-optimize\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\animation-optimize\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\animation-optimize\animation-optimize.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\animation-optimize
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\animation-play\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\animation-play\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\animation-play\animation-play.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\animation-play
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\blinds\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\blinds\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\blinds\blinds.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\blur\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\blur\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\blur\blur.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\border-average\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\border-average\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\border-average\border-average.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\border-average
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\busy-dialog\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\busy-dialog\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\busy-dialog\busy-dialog.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\busy-dialog
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\cartoon\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\cartoon\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\cartoon\cartoon.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\checkerboard\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\checkerboard\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\checkerboard\checkerboard.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\checkerboard
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\cml-explorer\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\cml-explorer\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\cml-explorer\cml-explorer.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\cml-explorer
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\color-cube-analyze\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\color-cube-analyze\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\color-cube-analyze\color-cube-analyze.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\color-cube-analyze
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\color-enhance\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\color-enhance\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\color-enhance\color-enhance.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\color-enhance
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colorify\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colorify\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colorify\colorify.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colormap-remap\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colormap-remap\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colormap-remap\colormap-remap.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colormap-remap
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\colorxhtml\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\compose\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\compose\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\compose\compose.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\contrast-normalize\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\contrast-normalize\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\contrast-normalize\contrast-normalize.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\contrast-normalize
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\contrast-retinex\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\contrast-retinex\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\contrast-retinex\contrast-retinex.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\contrast-retinex
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\crop-zealous\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\crop-zealous\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\crop-zealous\crop-zealous.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\crop-zealous
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\curve-bend\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\curve-bend\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\curve-bend\curve-bend.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\curve-bend
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\decompose\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\decompose\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\decompose\decompose.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\decompose
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\depth-merge\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\depth-merge\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\depth-merge\depth-merge.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\depth-merge
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\despeckle\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\despeckle\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\despeckle\despeckle.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\despeckle
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\destripe\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\destripe\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\destripe\destripe.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\edge-dog\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\edge-dog\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\edge-dog\edge-dog.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\edge-neon\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\edge-neon\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\edge-neon\edge-neon.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\edge-neon
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\emboss\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\emboss\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\emboss\emboss.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-bmp\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-bmp\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-bmp\file-bmp.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-cel\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-cel\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-cel\file-cel.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-compressor\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-compressor\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-compressor\file-compressor.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-compressor
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-csource\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-csource\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-csource\file-csource.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-csource
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-darktable\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-darktable\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-darktable\file-darktable.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-darktable
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-desktop-link\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-desktop-link\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-desktop-link\file-desktop-link.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-desktop-link
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-dicom\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-dicom\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-dicom\file-dicom.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-dicom
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-exr\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-exr\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-exr\file-exr.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-faxg3\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-faxg3\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-faxg3\file-faxg3.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-faxg3
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-fits\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-fits\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-fits\file-fits.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-fits
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-fli\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-fli\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-fli\file-fli.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gbr\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gbr\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gbr\file-gbr.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gegl\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gegl\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gegl\file-gegl.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gegl
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gif-load\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gif-load\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gif-load\file-gif-load.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gif-load
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gif-save\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gif-save\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gif-save\file-gif-save.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gif-save
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gih\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gih\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gih\file-gih.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-glob\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-glob\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-glob\file-glob.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-glob
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-header\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-header\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-header\file-header.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-header
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-heif\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-heif\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-heif\file-heif.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-heif
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-html-table\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-html-table\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-html-table\file-html-table.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-html-table
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ico\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ico\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ico\file-ico.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jp2-load\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jp2-load\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jp2-load\file-jp2-load.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jp2-load
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jpeg\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jpeg\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jpeg\file-jpeg.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-jpeg
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-mng\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-mng\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-mng\file-mng.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-openraster\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pat\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pat\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pat\file-pat.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pcx\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pcx\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pcx\file-pcx.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pdf-load\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pdf-load\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pdf-load\file-pdf-load.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pdf-load
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pdf-save\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pdf-save\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pdf-save\file-pdf-save.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pdf-save
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pix\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pix\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pix\file-pix.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-png\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-png\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-png\file-png.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pnm\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pnm\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-pnm\file-pnm.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ps\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ps\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-ps\file-ps.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-psd\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-psd\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-psd\file-psd.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-psp\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-psp\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-psp\file-psp.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-raw-data\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-raw-data\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-raw-data\file-raw-data.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-raw-data
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-raw-placeholder\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-raw-placeholder\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-raw-placeholder\file-raw-placeholder.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-raw-placeholder
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-rawtherapee\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-rawtherapee\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-rawtherapee\file-rawtherapee.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-rawtherapee
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-sgi\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-sgi\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-sgi\file-sgi.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-sunras\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-sunras\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-sunras\file-sunras.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-sunras
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-svg\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-svg\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-svg\file-svg.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-tga\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-tga\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-tga\file-tga.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-tiff\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-tiff\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-tiff\file-tiff.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-tiff
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-webp\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-webp\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-webp\file-webp.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-webp
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-wmf\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-wmf\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-wmf\file-wmf.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xbm\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xbm\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xbm\file-xbm.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xpm\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xpm\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xpm\file-xpm.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xwd\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xwd\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-xwd\file-xwd.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\film\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\film\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\film\film.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\filter-pack\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\filter-pack\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\filter-pack\filter-pack.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\filter-pack
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\flame\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\flame\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\flame\flame.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\foggify\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-explorer\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-explorer\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-explorer\fractal-explorer.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-explorer
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-trace\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-trace\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-trace\fractal-trace.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\fractal-trace
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gfig\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gfig\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gfig\gfig.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gimpressionist\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gimpressionist\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gimpressionist\gimpressionist.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gimpressionist
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\goat-exercise\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\goat-exercise\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\goat-exercise\goat-exercise.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\goat-exercise
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradient-flare\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradient-flare\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradient-flare\gradient-flare.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradient-flare
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradient-map\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradient-map\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradient-map\gradient-map.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradient-map
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\gradients-save-as-css\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\grid\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\grid\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\grid\grid.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\guillotine\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\guillotine\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\guillotine\guillotine.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\guillotine
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\help\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\help\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\help\help.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\help-browser\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\help-browser\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\help-browser\help-browser.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\help-browser
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\histogram-export\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\hot\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\hot\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\hot\hot.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\ifs-compose\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\ifs-compose\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\ifs-compose\ifs-compose.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\ifs-compose
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\imagemap\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\imagemap\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\imagemap\imagemap.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\jigsaw\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\jigsaw\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\jigsaw\jigsaw.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\lighting\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\lighting\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\lighting\lighting.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\map-object\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\map-object\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\map-object\map-object.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\map-object
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\max-rgb\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\max-rgb\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\max-rgb\max-rgb.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-editor\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-editor\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-editor\metadata-editor.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-editor
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-viewer\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-viewer\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-viewer\metadata-viewer.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\metadata-viewer
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\newsprint\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\newsprint\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\newsprint\newsprint.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\newsprint
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\nl-filter\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\nl-filter\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\nl-filter\nl-filter.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\nl-filter
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\oilify\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\oilify\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\oilify\oilify.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\pagecurl\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\pagecurl\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\pagecurl\pagecurl.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\palette-offset\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\palette-sort\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\palette-to-gradient\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\photocopy\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\photocopy\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\photocopy\photocopy.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\photocopy
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\plugin-browser\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\plugin-browser\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\plugin-browser\plugin-browser.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\plugin-browser
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\print\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\print\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\print\print.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\procedure-browser\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\procedure-browser\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\procedure-browser\procedure-browser.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\procedure-browser
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\py-slice\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\python-console\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\python-eval\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\qbist\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\qbist\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\qbist\qbist.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sample-colorize\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sample-colorize\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sample-colorize\sample-colorize.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sample-colorize
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\screenshot\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\screenshot\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\screenshot\screenshot.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\screenshot
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\script-fu\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\script-fu\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\script-fu\script-fu.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\script-fu
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\selection-to-path\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\selection-to-path\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\selection-to-path\selection-to-path.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\selection-to-path
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sharpen\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sharpen\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sharpen\sharpen.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\smooth-palette\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\smooth-palette\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\smooth-palette\smooth-palette.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\smooth-palette
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\softglow\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\softglow\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\softglow\softglow.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sparkle\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sparkle\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sparkle\sparkle.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sphere-designer\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sphere-designer\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sphere-designer\sphere-designer.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\sphere-designer
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\tile\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\tile\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\tile\tile.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\tile-small\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\tile-small\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\tile-small\tile-small.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\tile-small
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\twain\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\twain\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\twain\twain.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\unit-editor\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\unit-editor\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\unit-editor\unit-editor.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\unit-editor
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\van-gogh-lic\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\van-gogh-lic\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\van-gogh-lic\van-gogh-lic.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\van-gogh-lic
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\warp\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\warp\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\warp\warp.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\wavelet-decompose\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\wavelet-decompose\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\wavelet-decompose\wavelet-decompose.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\wavelet-decompose
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-browser\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-browser\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-browser\web-browser.exe
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-browser
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-page\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-page\.debug\*.*
C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\web-page\web-page.exe
C:\Program Files\GIMP 2\lib\gio\*.*
C:\Program Files\GIMP 2\lib\gio\modules\*.*
C:\Program Files\GIMP 2\lib\gtk-2.0\*.*
C:\Program Files\GIMP 2\lib\gtk-2.0\2.10.0\*.*
C:\Program Files\GIMP 2\lib\gtk-2.0\2.10.0\engines\*.*
C:\Program Files\GIMP 2\lib\gtk-2.0\2.10.0\loaders\*.*
C:\Program Files\GIMP 2\lib\gtk-2.0\modules\*.*
C:\Program Files\GIMP 2\share\*.*
C:\Program Files\GIMP 2\share\enchant\*.*
C:\Program Files\GIMP 2\share\ghostscript\*.*
C:\Program Files\GIMP 2\share\ghostscript\9.25\*.*
C:\Program Files\GIMP 2\share\ghostscript\9.25\lib\*.*
C:\Program Files\GIMP 2\share\gimp\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\brushes\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\brushes\Basic\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\brushes\Fun\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\brushes\gimp-obsolete-files\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\brushes\Legacy\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\brushes\Media\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\brushes\Sketch\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\brushes\Splatters\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\brushes\Texture\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\dynamics\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\dynamics\Basic\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\dynamics\FX\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\file-raw\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\fonts\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\fractalexplorer\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\gfig\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\gflare\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\gimpressionist\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\gimpressionist\Brushes\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\gimpressionist\Paper\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\gimpressionist\Presets\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\gradients\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\gradients\gimp-obsolete-files\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Color\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Color\24x24\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Color\24x24\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Color\64x64\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Color\64x64\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Color\scalable\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Color\scalable\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\hicolor\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\128x128\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\128x128\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\12x12\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\12x12\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\16x16\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\16x16\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\18x18\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\18x18\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\192x192\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\192x192\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\20x20\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\20x20\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\22x22\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\22x22\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\22x22\tools\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\24x24\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\24x24\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\256x256\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\256x256\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\32x32\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\32x32\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\48x48\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\48x48\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\64x64\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\64x64\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\96x96\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Legacy\96x96\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic\24x24\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic\24x24\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic\64x64\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic\64x64\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic\scalable\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic\scalable\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic-Inverted\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic-Inverted\24x24\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic-Inverted\24x24\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic-Inverted\64x64\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic-Inverted\64x64\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic-Inverted\scalable\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\icons\Symbolic-Inverted\scalable\apps\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\images\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\menus\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\palettes\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\patterns\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\patterns\Animal\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\patterns\Fabric\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\patterns\Food\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\patterns\Legacy\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\patterns\Paper\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\patterns\Plant\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\patterns\Sky\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\patterns\Stone\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\patterns\Water\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\patterns\Wood\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\scripts\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\scripts\images\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\tags\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\themes\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\themes\Dark\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\themes\Dark\ui\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\themes\Gray\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\themes\Gray\ui\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\themes\Light\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\themes\Light\ui\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\themes\System\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\tips\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\tool-presets\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\tool-presets\Crop\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\tool-presets\FX\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\tool-presets\Paint\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\tool-presets\Selection\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\tool-presets\Sketch\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\ui\*.*
C:\Program Files\GIMP 2\share\gimp\2.0\ui\plug-ins\*.*
C:\Program Files\GIMP 2\share\libthai\*.*
C:\Program Files\GIMP 2\share\libwmf\*.*
C:\Program Files\GIMP 2\share\libwmf\fonts\*.*
C:\Program Files\GIMP 2\share\locale\*.*
C:\Program Files\GIMP 2\share\locale\ab\*.*
C:\Program Files\GIMP 2\share\locale\ab\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ace\*.*
C:\Program Files\GIMP 2\share\locale\ace\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ach\*.*
C:\Program Files\GIMP 2\share\locale\ach\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\af\*.*
C:\Program Files\GIMP 2\share\locale\af\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ak\*.*
C:\Program Files\GIMP 2\share\locale\ak\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\am\*.*
C:\Program Files\GIMP 2\share\locale\am\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\an\*.*
C:\Program Files\GIMP 2\share\locale\an\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ang\*.*
C:\Program Files\GIMP 2\share\locale\ang\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ar\*.*
C:\Program Files\GIMP 2\share\locale\ar\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\as\*.*
C:\Program Files\GIMP 2\share\locale\as\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ast\*.*
C:\Program Files\GIMP 2\share\locale\ast\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ay\*.*
C:\Program Files\GIMP 2\share\locale\ay\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\az\*.*
C:\Program Files\GIMP 2\share\locale\az\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\az_IR\*.*
C:\Program Files\GIMP 2\share\locale\az_IR\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ba\*.*
C:\Program Files\GIMP 2\share\locale\ba\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\bar\*.*
C:\Program Files\GIMP 2\share\locale\bar\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\be\*.*
C:\Program Files\GIMP 2\share\locale\be\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\bg\*.*
C:\Program Files\GIMP 2\share\locale\bg\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\bi\*.*
C:\Program Files\GIMP 2\share\locale\bi\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\bn\*.*
C:\Program Files\GIMP 2\share\locale\bn\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\bn_IN\*.*
C:\Program Files\GIMP 2\share\locale\bn_IN\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\br\*.*
C:\Program Files\GIMP 2\share\locale\br\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\bs\*.*
C:\Program Files\GIMP 2\share\locale\bs\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\byn\*.*
C:\Program Files\GIMP 2\share\locale\byn\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ca\*.*
C:\Program Files\GIMP 2\share\locale\ca\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ce\*.*
C:\Program Files\GIMP 2\share\locale\ce\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ch\*.*
C:\Program Files\GIMP 2\share\locale\ch\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\chr\*.*
C:\Program Files\GIMP 2\share\locale\chr\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ckb\*.*
C:\Program Files\GIMP 2\share\locale\ckb\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\crh\*.*
C:\Program Files\GIMP 2\share\locale\crh\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\cs\*.*
C:\Program Files\GIMP 2\share\locale\cs\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\csb\*.*
C:\Program Files\GIMP 2\share\locale\csb\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\cv\*.*
C:\Program Files\GIMP 2\share\locale\cv\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\cy\*.*
C:\Program Files\GIMP 2\share\locale\cy\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\da\*.*
C:\Program Files\GIMP 2\share\locale\da\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\de\*.*
C:\Program Files\GIMP 2\share\locale\de\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\dv\*.*
C:\Program Files\GIMP 2\share\locale\dv\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\dz\*.*
C:\Program Files\GIMP 2\share\locale\dz\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ee\*.*
C:\Program Files\GIMP 2\share\locale\ee\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\el\*.*
C:\Program Files\GIMP 2\share\locale\el\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\en\*.*
C:\Program Files\GIMP 2\share\locale\en\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\en_CA\*.*
C:\Program Files\GIMP 2\share\locale\en_CA\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\en_GB\*.*
C:\Program Files\GIMP 2\share\locale\en_GB\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\eo\*.*
C:\Program Files\GIMP 2\share\locale\eo\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\es\*.*
C:\Program Files\GIMP 2\share\locale\es\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\es_ES\*.*
C:\Program Files\GIMP 2\share\locale\es_ES\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\et\*.*
C:\Program Files\GIMP 2\share\locale\et\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\eu\*.*
C:\Program Files\GIMP 2\share\locale\eu\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\fa\*.*
C:\Program Files\GIMP 2\share\locale\fa\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ff\*.*
C:\Program Files\GIMP 2\share\locale\ff\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\fi\*.*
C:\Program Files\GIMP 2\share\locale\fi\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\fo\*.*
C:\Program Files\GIMP 2\share\locale\fo\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\fr\*.*
C:\Program Files\GIMP 2\share\locale\fr\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\frp\*.*
C:\Program Files\GIMP 2\share\locale\frp\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\fur\*.*
C:\Program Files\GIMP 2\share\locale\fur\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\fy\*.*
C:\Program Files\GIMP 2\share\locale\fy\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ga\*.*
C:\Program Files\GIMP 2\share\locale\ga\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\gd\*.*
C:\Program Files\GIMP 2\share\locale\gd\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\gez\*.*
C:\Program Files\GIMP 2\share\locale\gez\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\gl\*.*
C:\Program Files\GIMP 2\share\locale\gl\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\gn\*.*
C:\Program Files\GIMP 2\share\locale\gn\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\gu\*.*
C:\Program Files\GIMP 2\share\locale\gu\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\gv\*.*
C:\Program Files\GIMP 2\share\locale\gv\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ha\*.*
C:\Program Files\GIMP 2\share\locale\ha\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\haw\*.*
C:\Program Files\GIMP 2\share\locale\haw\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\he\*.*
C:\Program Files\GIMP 2\share\locale\he\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\hi\*.*
C:\Program Files\GIMP 2\share\locale\hi\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\hr\*.*
C:\Program Files\GIMP 2\share\locale\hr\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ht\*.*
C:\Program Files\GIMP 2\share\locale\ht\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\hu\*.*
C:\Program Files\GIMP 2\share\locale\hu\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\hy\*.*
C:\Program Files\GIMP 2\share\locale\hy\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ia\*.*
C:\Program Files\GIMP 2\share\locale\ia\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\id\*.*
C:\Program Files\GIMP 2\share\locale\id\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\io\*.*
C:\Program Files\GIMP 2\share\locale\io\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\is\*.*
C:\Program Files\GIMP 2\share\locale\is\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\it\*.*
C:\Program Files\GIMP 2\share\locale\it\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\iu\*.*
C:\Program Files\GIMP 2\share\locale\iu\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ja\*.*
C:\Program Files\GIMP 2\share\locale\ja\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\jam\*.*
C:\Program Files\GIMP 2\share\locale\jam\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ka\*.*
C:\Program Files\GIMP 2\share\locale\ka\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\kab\*.*
C:\Program Files\GIMP 2\share\locale\kab\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ki\*.*
C:\Program Files\GIMP 2\share\locale\ki\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\kk\*.*
C:\Program Files\GIMP 2\share\locale\kk\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\kl\*.*
C:\Program Files\GIMP 2\share\locale\kl\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\km\*.*
C:\Program Files\GIMP 2\share\locale\km\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\kn\*.*
C:\Program Files\GIMP 2\share\locale\kn\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ko\*.*
C:\Program Files\GIMP 2\share\locale\ko\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\kok\*.*
C:\Program Files\GIMP 2\share\locale\kok\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ku\*.*
C:\Program Files\GIMP 2\share\locale\ku\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\kv\*.*
C:\Program Files\GIMP 2\share\locale\kv\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\kw\*.*
C:\Program Files\GIMP 2\share\locale\kw\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ky\*.*
C:\Program Files\GIMP 2\share\locale\ky\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\li\*.*
C:\Program Files\GIMP 2\share\locale\li\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\lo\*.*
C:\Program Files\GIMP 2\share\locale\lo\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\lt\*.*
C:\Program Files\GIMP 2\share\locale\lt\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\lv\*.*
C:\Program Files\GIMP 2\share\locale\lv\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\mai\*.*
C:\Program Files\GIMP 2\share\locale\mai\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\mg\*.*
C:\Program Files\GIMP 2\share\locale\mg\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\mhr\*.*
C:\Program Files\GIMP 2\share\locale\mhr\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\mi\*.*
C:\Program Files\GIMP 2\share\locale\mi\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\mk\*.*
C:\Program Files\GIMP 2\share\locale\mk\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ml\*.*
C:\Program Files\GIMP 2\share\locale\ml\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\mn\*.*
C:\Program Files\GIMP 2\share\locale\mn\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\mo\*.*
C:\Program Files\GIMP 2\share\locale\mo\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\mr\*.*
C:\Program Files\GIMP 2\share\locale\mr\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ms\*.*
C:\Program Files\GIMP 2\share\locale\ms\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\mt\*.*
C:\Program Files\GIMP 2\share\locale\mt\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\my\*.*
C:\Program Files\GIMP 2\share\locale\my\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\na\*.*
C:\Program Files\GIMP 2\share\locale\na\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\nah\*.*
C:\Program Files\GIMP 2\share\locale\nah\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\nb\*.*
C:\Program Files\GIMP 2\share\locale\nb\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\nds\*.*
C:\Program Files\GIMP 2\share\locale\nds\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ne\*.*
C:\Program Files\GIMP 2\share\locale\ne\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\nl\*.*
C:\Program Files\GIMP 2\share\locale\nl\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\nn\*.*
C:\Program Files\GIMP 2\share\locale\nn\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\nn_NO\*.*
C:\Program Files\GIMP 2\share\locale\nn_NO\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\nso\*.*
C:\Program Files\GIMP 2\share\locale\nso\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\nv\*.*
C:\Program Files\GIMP 2\share\locale\nv\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\oc\*.*
C:\Program Files\GIMP 2\share\locale\oc\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\or\*.*
C:\Program Files\GIMP 2\share\locale\or\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\pa\*.*
C:\Program Files\GIMP 2\share\locale\pa\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\pap\*.*
C:\Program Files\GIMP 2\share\locale\pap\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\pi\*.*
C:\Program Files\GIMP 2\share\locale\pi\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\pl\*.*
C:\Program Files\GIMP 2\share\locale\pl\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ps\*.*
C:\Program Files\GIMP 2\share\locale\ps\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\pt\*.*
C:\Program Files\GIMP 2\share\locale\pt\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\pt_BR\*.*
C:\Program Files\GIMP 2\share\locale\pt_BR\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ro\*.*
C:\Program Files\GIMP 2\share\locale\ro\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ru\*.*
C:\Program Files\GIMP 2\share\locale\ru\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\rw\*.*
C:\Program Files\GIMP 2\share\locale\rw\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\sc\*.*
C:\Program Files\GIMP 2\share\locale\sc\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\sd\*.*
C:\Program Files\GIMP 2\share\locale\sd\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\si\*.*
C:\Program Files\GIMP 2\share\locale\si\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\sk\*.*
C:\Program Files\GIMP 2\share\locale\sk\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\sl\*.*
C:\Program Files\GIMP 2\share\locale\sl\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\so\*.*
C:\Program Files\GIMP 2\share\locale\so\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\son\*.*
C:\Program Files\GIMP 2\share\locale\son\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\sq\*.*
C:\Program Files\GIMP 2\share\locale\sq\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\sr\*.*
C:\Program Files\GIMP 2\share\locale\sr\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\sv\*.*
C:\Program Files\GIMP 2\share\locale\sv\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\sw\*.*
C:\Program Files\GIMP 2\share\locale\sw\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ta\*.*
C:\Program Files\GIMP 2\share\locale\ta\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\te\*.*
C:\Program Files\GIMP 2\share\locale\te\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\tg\*.*
C:\Program Files\GIMP 2\share\locale\tg\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\th\*.*
C:\Program Files\GIMP 2\share\locale\th\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ti\*.*
C:\Program Files\GIMP 2\share\locale\ti\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\tig\*.*
C:\Program Files\GIMP 2\share\locale\tig\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\tk\*.*
C:\Program Files\GIMP 2\share\locale\tk\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\tl\*.*
C:\Program Files\GIMP 2\share\locale\tl\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\tr\*.*
C:\Program Files\GIMP 2\share\locale\tr\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\tt\*.*
C:\Program Files\GIMP 2\share\locale\tt\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ug\*.*
C:\Program Files\GIMP 2\share\locale\ug\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\uk\*.*
C:\Program Files\GIMP 2\share\locale\uk\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ur\*.*
C:\Program Files\GIMP 2\share\locale\ur\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\uz\*.*
C:\Program Files\GIMP 2\share\locale\uz\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\*.*
C:\Program Files\GIMP 2\share\locale\[email protected]\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\ve\*.*
C:\Program Files\GIMP 2\share\locale\ve\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\vi\*.*
C:\Program Files\GIMP 2\share\locale\vi\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\wa\*.*
C:\Program Files\GIMP 2\share\locale\wa\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\wal\*.*
C:\Program Files\GIMP 2\share\locale\wal\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\wo\*.*
C:\Program Files\GIMP 2\share\locale\wo\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\xh\*.*
C:\Program Files\GIMP 2\share\locale\xh\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\yi\*.*
C:\Program Files\GIMP 2\share\locale\yi\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\yo\*.*
C:\Program Files\GIMP 2\share\locale\yo\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\zh_CN\*.*
C:\Program Files\GIMP 2\share\locale\zh_CN\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\zh_HK\*.*
C:\Program Files\GIMP 2\share\locale\zh_HK\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\zh_TW\*.*
C:\Program Files\GIMP 2\share\locale\zh_TW\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\locale\zu\*.*
C:\Program Files\GIMP 2\share\locale\zu\LC_MESSAGES\*.*
C:\Program Files\GIMP 2\share\mypaint-data\*.*
C:\Program Files\GIMP 2\share\mypaint-data\1.0\*.*
C:\Program Files\GIMP 2\share\mypaint-data\1.0\brushes\*.*
C:\Program Files\GIMP 2\share\mypaint-data\1.0\brushes\classic\*.*
C:\Program Files\GIMP 2\share\mypaint-data\1.0\brushes\deevad\*.*
C:\Program Files\GIMP 2\share\mypaint-data\1.0\brushes\experimental\*.*
C:\Program Files\GIMP 2\share\mypaint-data\1.0\brushes\kaerhon_v1\*.*
C:\Program Files\GIMP 2\share\mypaint-data\1.0\brushes\ramon\*.*
C:\Program Files\GIMP 2\share\mypaint-data\1.0\brushes\tanda\*.*
C:\Program Files\GIMP 2\share\poppler\*.*
C:\Program Files\GIMP 2\share\poppler\cidToUnicode\*.*
C:\Program Files\GIMP 2\share\poppler\cMap\*.*
C:\Program Files\GIMP 2\share\poppler\cMap\Adobe-CNS1\*.*
C:\Program Files\GIMP 2\share\poppler\cMap\Adobe-GB1\*.*
C:\Program Files\GIMP 2\share\poppler\cMap\Adobe-Japan1\*.*
C:\Program Files\GIMP 2\share\poppler\cMap\Adobe-Japan2\*.*
C:\Program Files\GIMP 2\share\poppler\cMap\Adobe-Korea1\*.*
C:\Program Files\GIMP 2\share\poppler\nameToUnicode\*.*
C:\Program Files\GIMP 2\share\poppler\unicodeMap\*.*
C:\Program Files\GIMP 2\share\themes\*.*
C:\Program Files\GIMP 2\share\themes\Default\*.*
C:\Program Files\GIMP 2\share\themes\Default\gtk-2.0-key\*.*
C:\Program Files\GIMP 2\share\themes\Emacs\*.*
C:\Program Files\GIMP 2\share\themes\Emacs\gtk-2.0-key\*.*
C:\Program Files\GIMP 2\share\themes\MS-Windows\*.*
C:\Program Files\GIMP 2\share\themes\MS-Windows\gtk-2.0\*.*
C:\Program Files\GIMP 2\share\themes\Raleigh\*.*
C:\Program Files\GIMP 2\share\themes\Raleigh\gtk-2.0\*.*
C:\Program Files\GIMP 2\share\xml\*.*
C:\Program Files\GIMP 2\share\xml\dbus-1\*.*
C:\Program Files\GIMP 2\share\xml\fontconfig\*.*
C:\Program Files\GIMP 2\share\xml\iso-codes\*.*
C:\Program Files\GIMP 2\share\xml\libglade\*.*
C:\Program Files\GIMP 2\uninst\*.*
C:\Program Files\GIMP 2\uninst\unins000.exe
C:\Program Files\Internet Explorer\*.*
C:\Program Files\Internet Explorer\en-US\*.*
C:\Program Files\Internet Explorer\iediagcmd.exe
C:\Program Files\Internet Explorer
C:\Program Files\Internet Explorer\ieinstal.exe
C:\Program Files\Internet Explorer\ielowutil.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\images\*.*
C:\Program Files\Internet Explorer\SIGNUP\*.*
C:\Program Files\IrfanView\*.*
C:\Program Files\IrfanView\Html\*.*
C:\Program Files\IrfanView\iv_uninstall.exe
C:\Program Files\IrfanView
C:\Program Files\IrfanView\i_view64.exe
C:\Program Files\IrfanView\Languages\*.*
C:\Program Files\IrfanView\Plugins\*.*
C:\Program Files\IrfanView\Plugins\Slideshow.exe
C:\Program Files\IrfanView\Plugins\Stub_Plugin.exe
C:\Program Files\IrfanView\Toolbars\*.*
C:\Program Files\Microsoft Office\*.*
C:\Program Files\Microsoft Office\Office14\*.*
C:\Program Files\Microsoft Office\Office14\1033\*.*
C:\Program Files\Microsoft Office\Office14\MSOHTMED.EXE
C:\Program Files\Microsoft Office
C:\Program Files\Microsoft Office 15\*.*
C:\Program Files\Microsoft Office 15\ClientX64\*.*
C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe
C:\Program Files\Microsoft Office 15
C:\Program Files\Microsoft Office 15\ClientX64
C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
C:\Program Files\MSBuild\*.*
C:\Program Files\MSBuild\Microsoft\*.*
C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\*.*
C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\*.*
C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\*.*
C:\Program Files\Notepad++\*.*
C:\Program Files\Notepad++\autoCompletion\*.*
C:\Program Files\Notepad++\localization\*.*
C:\Program Files\Notepad++\notepad++.exe
C:\Program Files\Notepad++
C:\Program Files\Notepad++\plugins\*.*
C:\Program Files\Notepad++\plugins\Config\*.*
C:\Program Files\Notepad++\plugins\DSpellCheck\*.*
C:\Program Files\Notepad++\plugins\mimeTools\*.*
C:\Program Files\Notepad++\plugins\NppConverter\*.*
C:\Program Files\Notepad++\uninstall.exe
C:\Program Files\Notepad++\updater\*.*
C:\Program Files\Notepad++\updater\GUP.exe
C:\Program Files\Reference Assemblies\*.*
C:\Program Files\Reference Assemblies\Microsoft\*.*
C:\Program Files\Reference Assemblies\Microsoft\Framework\*.*
C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\*.*
C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\*.*
C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\*.*
C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\*.*
C:\Program Files\Speccy\*.*
C:\Program Files\Speccy\Lang\*.*
C:\Program Files\Speccy\Speccy.exe
C:\Program Files\Speccy\Speccy64.exe
C:\Program Files\Speccy\uninst.exe
C:\Program Files\Uninstall Information\*.*
C:\Program Files\VideoLAN\*.*
C:\Program Files\VideoLAN\VLC\*.*
C:\Program Files\VideoLAN\VLC\hrtfs\*.*
C:\Program Files\VideoLAN\VLC\locale\*.*
C:\Program Files\VideoLAN\VLC\locale\ach\*.*
C:\Program Files\VideoLAN\VLC\locale\ach\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\af\*.*
C:\Program Files\VideoLAN\VLC\locale\af\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\am\*.*
C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\an\*.*
C:\Program Files\VideoLAN\VLC\locale\an\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ar\*.*
C:\Program Files\VideoLAN\VLC\locale\ar\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ast\*.*
C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\as_IN\*.*
C:\Program Files\VideoLAN\VLC\locale\as_IN\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\az\*.*
C:\Program Files\VideoLAN\VLC\locale\az\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\be\*.*
C:\Program Files\VideoLAN\VLC\locale\be\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\bg\*.*
C:\Program Files\VideoLAN\VLC\locale\bg\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\bn\*.*
C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\bn_IN\*.*
C:\Program Files\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\br\*.*
C:\Program Files\VideoLAN\VLC\locale\br\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\brx\*.*
C:\Program Files\VideoLAN\VLC\locale\brx\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\bs\*.*
C:\Program Files\VideoLAN\VLC\locale\bs\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ca\*.*
C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\cgg\*.*
C:\Program Files\VideoLAN\VLC\locale\cgg\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ckb\*.*
C:\Program Files\VideoLAN\VLC\locale\ckb\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\co\*.*
C:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\cs\*.*
C:\Program Files\VideoLAN\VLC\locale\cs\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\cy\*.*
C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\da\*.*
C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\de\*.*
C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\el\*.*
C:\Program Files\VideoLAN\VLC\locale\el\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\en_GB\*.*
C:\Program Files\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\es\*.*
C:\Program Files\VideoLAN\VLC\locale\es\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\et\*.*
C:\Program Files\VideoLAN\VLC\locale\et\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\eu\*.*
C:\Program Files\VideoLAN\VLC\locale\eu\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\fa\*.*
C:\Program Files\VideoLAN\VLC\locale\fa\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ff\*.*
C:\Program Files\VideoLAN\VLC\locale\ff\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\fi\*.*
C:\Program Files\VideoLAN\VLC\locale\fi\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\fr\*.*
C:\Program Files\VideoLAN\VLC\locale\fr\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\fur\*.*
C:\Program Files\VideoLAN\VLC\locale\fur\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\fy\*.*
C:\Program Files\VideoLAN\VLC\locale\fy\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ga\*.*
C:\Program Files\VideoLAN\VLC\locale\ga\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\gd\*.*
C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\gl\*.*
C:\Program Files\VideoLAN\VLC\locale\gl\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\gu\*.*
C:\Program Files\VideoLAN\VLC\locale\gu\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\he\*.*
C:\Program Files\VideoLAN\VLC\locale\he\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\hi\*.*
C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\hr\*.*
C:\Program Files\VideoLAN\VLC\locale\hr\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\hu\*.*
C:\Program Files\VideoLAN\VLC\locale\hu\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\hy\*.*
C:\Program Files\VideoLAN\VLC\locale\hy\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ia\*.*
C:\Program Files\VideoLAN\VLC\locale\ia\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\id\*.*
C:\Program Files\VideoLAN\VLC\locale\id\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\is\*.*
C:\Program Files\VideoLAN\VLC\locale\is\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\it\*.*
C:\Program Files\VideoLAN\VLC\locale\it\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ja\*.*
C:\Program Files\VideoLAN\VLC\locale\ja\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ka\*.*
C:\Program Files\VideoLAN\VLC\locale\ka\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\kk\*.*
C:\Program Files\VideoLAN\VLC\locale\kk\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\km\*.*
C:\Program Files\VideoLAN\VLC\locale\km\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\kn\*.*
C:\Program Files\VideoLAN\VLC\locale\kn\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ko\*.*
C:\Program Files\VideoLAN\VLC\locale\ko\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ks_IN\*.*
C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ky\*.*
C:\Program Files\VideoLAN\VLC\locale\ky\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\lg\*.*
C:\Program Files\VideoLAN\VLC\locale\lg\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\lt\*.*
C:\Program Files\VideoLAN\VLC\locale\lt\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\lv\*.*
C:\Program Files\VideoLAN\VLC\locale\lv\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\mai\*.*
C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\mk\*.*
C:\Program Files\VideoLAN\VLC\locale\mk\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ml\*.*
C:\Program Files\VideoLAN\VLC\locale\ml\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\mn\*.*
C:\Program Files\VideoLAN\VLC\locale\mn\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\mr\*.*
C:\Program Files\VideoLAN\VLC\locale\mr\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ms\*.*
C:\Program Files\VideoLAN\VLC\locale\ms\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\my\*.*
C:\Program Files\VideoLAN\VLC\locale\my\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\nb\*.*
C:\Program Files\VideoLAN\VLC\locale\nb\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ne\*.*
C:\Program Files\VideoLAN\VLC\locale\ne\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\nl\*.*
C:\Program Files\VideoLAN\VLC\locale\nl\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\nn\*.*
C:\Program Files\VideoLAN\VLC\locale\nn\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\oc\*.*
C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\or\*.*
C:\Program Files\VideoLAN\VLC\locale\or\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\pa\*.*
C:\Program Files\VideoLAN\VLC\locale\pa\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\pl\*.*
C:\Program Files\VideoLAN\VLC\locale\pl\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ps\*.*
C:\Program Files\VideoLAN\VLC\locale\ps\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\pt_BR\*.*
C:\Program Files\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\pt_PT\*.*
C:\Program Files\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ro\*.*
C:\Program Files\VideoLAN\VLC\locale\ro\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ru\*.*
C:\Program Files\VideoLAN\VLC\locale\ru\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\si\*.*
C:\Program Files\VideoLAN\VLC\locale\si\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\sk\*.*
C:\Program Files\VideoLAN\VLC\locale\sk\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\sl\*.*
C:\Program Files\VideoLAN\VLC\locale\sl\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\sq\*.*
C:\Program Files\VideoLAN\VLC\locale\sq\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\sr\*.*
C:\Program Files\VideoLAN\VLC\locale\sr\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\sv\*.*
C:\Program Files\VideoLAN\VLC\locale\sv\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ta\*.*
C:\Program Files\VideoLAN\VLC\locale\ta\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\te\*.*
C:\Program Files\VideoLAN\VLC\locale\te\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\tet\*.*
C:\Program Files\VideoLAN\VLC\locale\tet\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\th\*.*
C:\Program Files\VideoLAN\VLC\locale\th\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\tl\*.*
C:\Program Files\VideoLAN\VLC\locale\tl\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\tr\*.*
C:\Program Files\VideoLAN\VLC\locale\tr\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\ug\*.*
C:\Program Files\VideoLAN\VLC\locale\ug\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\uk\*.*
C:\Program Files\VideoLAN\VLC\locale\uk\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\uz\*.*
C:\Program Files\VideoLAN\VLC\locale\uz\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\vi\*.*
C:\Program Files\VideoLAN\VLC\locale\vi\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\wa\*.*
C:\Program Files\VideoLAN\VLC\locale\wa\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\zh_CN\*.*
C:\Program Files\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\zh_TW\*.*
C:\Program Files\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\locale\zu\*.*
C:\Program Files\VideoLAN\VLC\locale\zu\LC_MESSAGES\*.*
C:\Program Files\VideoLAN\VLC\lua\*.*
C:\Program Files\VideoLAN\VLC\lua\extensions\*.*
C:\Program Files\VideoLAN\VLC\lua\http\*.*
C:\Program Files\VideoLAN\VLC\lua\http\css\*.*
C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\*.*
C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\*.*
C:\Program Files\VideoLAN\VLC\lua\http\dialogs\*.*
C:\Program Files\VideoLAN\VLC\lua\http\images\*.*
C:\Program Files\VideoLAN\VLC\lua\http\js\*.*
C:\Program Files\VideoLAN\VLC\lua\http\requests\*.*
C:\Program Files\VideoLAN\VLC\lua\intf\*.*
C:\Program Files\VideoLAN\VLC\lua\intf\modules\*.*
C:\Program Files\VideoLAN\VLC\lua\meta\*.*
C:\Program Files\VideoLAN\VLC\lua\meta\art\*.*
C:\Program Files\VideoLAN\VLC\lua\meta\reader\*.*
C:\Program Files\VideoLAN\VLC\lua\modules\*.*
C:\Program Files\VideoLAN\VLC\lua\playlist\*.*
C:\Program Files\VideoLAN\VLC\lua\sd\*.*
C:\Program Files\VideoLAN\VLC\plugins\*.*
C:\Program Files\VideoLAN\VLC\plugins\access\*.*
C:\Program Files\VideoLAN\VLC\plugins\access_output\*.*
C:\Program Files\VideoLAN\VLC\plugins\audio_filter\*.*
C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\*.*
C:\Program Files\VideoLAN\VLC\plugins\audio_output\*.*
C:\Program Files\VideoLAN\VLC\plugins\codec\*.*
C:\Program Files\VideoLAN\VLC\plugins\control\*.*
C:\Program Files\VideoLAN\VLC\plugins\d3d11\*.*
C:\Program Files\VideoLAN\VLC\plugins\d3d9\*.*
C:\Program Files\VideoLAN\VLC\plugins\demux\*.*
C:\Program Files\VideoLAN\VLC\plugins\gui\*.*
C:\Program Files\VideoLAN\VLC\plugins\keystore\*.*
C:\Program Files\VideoLAN\VLC\plugins\logger\*.*
C:\Program Files\VideoLAN\VLC\plugins\lua\*.*
C:\Program Files\VideoLAN\VLC\plugins\meta_engine\*.*
C:\Program Files\VideoLAN\VLC\plugins\misc\*.*
C:\Program Files\VideoLAN\VLC\plugins\mux\*.*
C:\Program Files\VideoLAN\VLC\plugins\packetizer\*.*
C:\Program Files\VideoLAN\VLC\plugins\services_discovery\*.*
C:\Program Files\VideoLAN\VLC\plugins\spu\*.*
C:\Program Files\VideoLAN\VLC\plugins\stream_extractor\*.*
C:\Program Files\VideoLAN\VLC\plugins\stream_filter\*.*
C:\Program Files\VideoLAN\VLC\plugins\stream_out\*.*
C:\Program Files\VideoLAN\VLC\plugins\text_renderer\*.*
C:\Program Files\VideoLAN\VLC\plugins\video_chroma\*.*
C:\Program Files\VideoLAN\VLC\plugins\video_filter\*.*
C:\Program Files\VideoLAN\VLC\plugins\video_output\*.*
C:\Program Files\VideoLAN\VLC\plugins\video_splitter\*.*
C:\Program Files\VideoLAN\VLC\plugins\visualization\*.*
C:\Program Files\VideoLAN\VLC\skins\*.*
C:\Program Files\VideoLAN\VLC\skins\fonts\*.*
C:\Program Files\VideoLAN\VLC\uninstall.exe
C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe
C:\Program Files\VideoLAN\VLC\vlc.exe
C:\Program Files\Windows Defender\*.*
C:\Program Files\Windows Defender\en-US\*.*
C:\Program Files\Windows Defender\MpCmdRun.exe
C:\Program Files\Windows Defender
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Windows Mail\*.*
C:\Program Files\Windows Mail\en-US\*.*
C:\Program Files\Windows Mail\wab.exe
C:\Program Files\Windows Mail
C:\Program Files\Windows Mail\wabmig.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Program Files\Windows Media Player\*.*
C:\Program Files\Windows Media Player\en-US\*.*
C:\Program Files\Windows Media Player\Icons\*.*
C:\Program Files\Windows Media Player\Media Renderer\*.*
C:\Program Files\Windows Media Player\Network Sharing\*.*
C:\Program Files\Windows Media Player\setup_wm.exe
C:\Program Files\Windows Media Player
C:\Program Files\Windows Media Player\Skins\*.*
C:\Program Files\Windows Media Player\Visualizations\*.*
C:\Program Files\Windows Media Player\wmlaunch.exe
C:\Program Files\Windows Media Player\wmpconfig.exe
C:\Program Files\Windows Media Player\WMPDMC.exe
C:\Program Files\Windows Media Player\wmpenc.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmprph.exe
C:\Program Files\Windows Media Player\wmpshare.exe
C:\Program Files\Windows Media Player\WMPSideShowGadget.exe
C:\Program Files\Windows NT\*.*
C:\Program Files\Windows NT\Accessories\*.*
C:\Program Files\Windows NT\Accessories\en-US\*.*
C:\Program Files\Windows NT\Accessories\wordpad.exe
C:\Program Files\Windows NT
C:\Program Files\Windows NT\Accessories
C:\Program Files\Windows NT\TableTextService\*.*
C:\Program Files\Windows NT\TableTextService\en-US\*.*
C:\Program Files\Windows Photo Viewer\*.*
C:\Program Files\Windows Photo Viewer\en-US\*.*
C:\Program Files\Windows Photo Viewer\ImagingDevices.exe
C:\Program Files\Windows Photo Viewer
C:\Program Files\Windows Portable Devices\*.*
C:\Program Files\Windows Sidebar\*.*
C:\Program Files\Windows Sidebar\en-US\*.*
C:\Program Files\Windows Sidebar\Gadgets\*.*
C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\*.*
C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\*.*
C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css\*.*
C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\js\*.*
C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\*.*
C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\*.*
C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\*.*
C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css\*.*
C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\*.*
C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\*.*
C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\*.*
C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\*.*
C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\css\*.*
C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\js\*.*
C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\*.*
C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\*.*
C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\*.*
C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\css\*.*
C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\*.*
C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\*.*
C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\*.*
C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\css\*.*
C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\en-US\*.*
C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\*.*
C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\js\*.*
C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\*.*
C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\*.*
C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\*.*
C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js\*.*
C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\*.*
C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\*.*
C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\*.*
C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\*.*
C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js\*.*
C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\*.*
C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\*.*
C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\*.*
C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css\*.*
C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\js\*.*
C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\*.*
C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar\*.*
C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\on_desktop\*.*
C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\*.*
C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\*.*
C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\*.*
C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\*.*
C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\*.*
C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\*.*
C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\*.*
C:\Program Files\Windows Sidebar\Shared Gadgets\*.*
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Sidebar
C:\Program Files\WindowsPowerShell\*.*
C:\Program Files\WindowsPowerShell\Configuration\*.*
C:\Program Files\WindowsPowerShell\Configuration\Registration\*.*
C:\Program Files\WindowsPowerShell\Configuration\Schema\*.*
C:\Program Files\WindowsPowerShell\Modules\*.*
C:\Program Files\WindowsPowerShell\Modules\PackageManagement\*.*
C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\*.*
C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\en\*.*
C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\*.*
C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\*.*
C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\en-US\*.*
C:\Program Files\WinRAR\*.*
C:\Program Files\WinRAR\Ace32Loader.exe
C:\Program Files\WinRAR\Rar.exe
C:\Program Files\WinRAR\Uninstall.exe
C:\Program Files\WinRAR\UnRAR.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Program Files (x86)\*.*
C:\Program Files (x86)\Adobe\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Esl\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroBroker.exe
C:\Program Files (x86)
C:\Program Files (x86)\Adobe\Reader 11.0
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroExt\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroExt\AcroExt.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroExt\locales\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32Info.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroTextExtractor.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\arh.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Eula.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\IDTemplates\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\IDTemplates\ENU\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Javascripts\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Legal\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Legal\ENU\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\LogTransport2.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\plug_ins\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\plug_ins\AcroForm\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\plug_ins\AcroForm\PMP\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\plug_ins\Annotations\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\plug_ins\Annotations\Stamps\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\plug_ins\Annotations\Stamps\ENU\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\plug_ins\Multimedia\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\plug_ins\Multimedia\MPP\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\plug_ins\pi_brokers\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\plug_ins\pi_brokers
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\plug_ins3d\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\plug_ins3d\prc\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\reader_sl.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Services\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Tracker\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\wow_helper.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Resource\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Resource\CMap\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Resource\Font\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Resource\Font\PFM\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Resource\SaslPrep\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Resource\TypeSupport\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Resource\TypeSupport\Unicode\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Resource\TypeSupport\Unicode\ICU\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Resource\TypeSupport\Unicode\Mappings\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Resource\TypeSupport\Unicode\Mappings\Adobe\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Resource\TypeSupport\Unicode\Mappings\Mac\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Resource\TypeSupport\Unicode\Mappings\win\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Setup Files\*.*
C:\Program Files (x86)\Adobe\Reader 11.0\Setup Files\{AC76BA86-7AD7-1033-7B44-AB0000000001}\*.*
C:\Program Files (x86)\Common Files\*.*
C:\Program Files (x86)\Common Files\Adobe\*.*
C:\Program Files (x86)\Common Files\Adobe\Acrobat\*.*
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\*.*
C:\Program Files (x86)\Common Files\Adobe\ARM\*.*
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\*.*
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Common Files
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\*.*
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\en_US\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\LanguageNames2\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\Providers\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\Providers\Adobe\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\Providers\Plugins2\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\en_CA\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\en_GB\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\en_US\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_CA\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_GB\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_US\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_CA\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_GB\*.*
C:\Program Files (x86)\Common Files\Adobe\Reader\11.0\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_US\*.*
C:\Program Files (x86)\Common Files\DESIGNER\*.*
C:\Program Files (x86)\Common Files\Java\*.*
C:\Program Files (x86)\Common Files\Java\Java Update\*.*
C:\Program Files (x86)\Common Files\Java\Java Update\jaucheck.exe
C:\Program Files (x86)\Common Files\Java\Java Update
C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\microsoft shared\*.*
C:\Program Files (x86)\Common Files\microsoft shared\DAO\*.*
C:\Program Files (x86)\Common Files\microsoft shared\DW\*.*
C:\Program Files (x86)\Common Files\microsoft shared\DW\DW20.EXE
C:\Program Files (x86)\Common Files\microsoft shared
C:\Program Files (x86)\Common Files\microsoft shared\DW\DWTRIG20.EXE
C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\*.*
C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\1033\*.*
C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\EQNEDT32.EXE
C:\Program Files (x86)\Common Files\microsoft shared\EURO\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Filters\*.*
C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Help\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Help\1028\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Help\1031\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Help\1033\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Help\1036\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Help\1040\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Help\1041\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Help\1042\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Help\1046\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Help\1049\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Help\2052\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Help\3082\*.*
C:\Program Files (x86)\Common Files\microsoft shared\ink\*.*
C:\Program Files (x86)\Common Files\microsoft shared\ink\1.0\*.*
C:\Program Files (x86)\Common Files\microsoft shared\ink\1.7\*.*
C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\*.*
C:\Program Files (x86)\Common Files\microsoft shared\ink\HWRCustomization\*.*
C:\Program Files (x86)\Common Files\microsoft shared\ink\mip.exe
C:\Program Files (x86)\Common Files\microsoft shared\ink\pipanel.exe
C:\Program Files (x86)\Common Files\microsoft shared\ink\TabTip32.exe
C:\Program Files (x86)\Common Files\microsoft shared\MSClientDataMgr\*.*
C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\*.*
C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\PublicAssemblies\*.*
C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\*.*
C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\en-US\*.*
C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\msinfo32.exe
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\FLTLDR.EXE
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\LICLUA.EXE
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOICONS.EXE
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLED.EXE
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Oarpmany.exe
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Access.en-us\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Excel.en-us\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Groove.en-us\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\InfoPath.en-us\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\ODeploy.exe
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.en-us\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.WW\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OneNote.en-us\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Outlook.en-us\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.en\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.es\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.fr\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proofing.en-us\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Publisher.en-us\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Setup.exe
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Word.en-us\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE16\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE16\LICLUA.EXE
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE16\Office Setup Controller\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\*.*
C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE
C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform
C:\Program Files (x86)\Common Files\microsoft shared\Portal\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Portal\1033\*.*
C:\Program Files (x86)\Common Files\microsoft shared\PROOF\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\1033\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\1033\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\SmartTagInstall.exe
C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag
C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE
C:\Program Files (x86)\Common Files\microsoft shared\Source Engine
C:\Program Files (x86)\Common Files\microsoft shared\Stationery\*.*
C:\Program Files (x86)\Common Files\microsoft shared\TextConv\*.*
C:\Program Files (x86)\Common Files\microsoft shared\TextConv\en-US\*.*
C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv\*.*
C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv\Wkconv.exe
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AFTRNOON\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ARCTIC\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AXIS\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLENDS\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUECALM\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUEPRNT\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BOLDSTRI\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BREEZE\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CANYON\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CAPSULES\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CASCADE\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\COMPASS\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CONCRETE\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\DEEPBLUE\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECHO\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECLIPSE\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EDGE\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EVRGREEN\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EXPEDITN\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ICE\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\INDUST\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\IRIS\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\JOURNAL\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LAYERS\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LEVEL\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\NETWORK\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PAPYRUS\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PIXEL\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PROFILE\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\QUAD\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RADIAL\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\REFINED\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RICEPAPR\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RIPPLE\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RMNSQUE\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SATIN\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SKY\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SLATE\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SONORA\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SPRING\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STRTEDGE\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STUDIO\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SUMIPNTG\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATER\*.*
C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATERMAR\*.*
C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\*.*
C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ARFR\*.*
C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENES\*.*
C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENFR\*.*
C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ESEN\*.*
C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FRAR\*.*
C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FREN\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Triedit\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Triedit\en-US\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VBA\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA6\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VC\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VC\amd64\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VGX\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\vsta_ep32.exe
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VSTO\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\*.*
C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\1033\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\*.*
C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\1033\*.*
C:\Program Files (x86)\Common Files\Services\*.*
C:\Program Files (x86)\Common Files\SpeechEngines\*.*
C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\*.*
C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\*.*
C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\*.*
C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\*.*
C:\Program Files (x86)\Common Files\System\*.*
C:\Program Files (x86)\Common Files\System\ado\*.*
C:\Program Files (x86)\Common Files\System\ado\en-US\*.*
C:\Program Files (x86)\Common Files\System\en-US\*.*
C:\Program Files (x86)\Common Files\System\msadc\*.*
C:\Program Files (x86)\Common Files\System\msadc\en-US\*.*
C:\Program Files (x86)\Common Files\System\MSMAPI\*.*
C:\Program Files (x86)\Common Files\System\MSMAPI\1033\*.*
C:\Program Files (x86)\Common Files\System\Ole DB\*.*
C:\Program Files (x86)\Common Files\System\Ole DB\en-US\*.*
C:\Program Files (x86)\Google\*.*
C:\Program Files (x86)\Google\Chrome\*.*
C:\Program Files (x86)\Google\Chrome\Application\*.*
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\*.*
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\default_apps\*.*
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\elevation_service.exe
C:\Program Files (x86)\Google\Chrome\Application
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\Extensions\*.*
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\Installer\*.*
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\Installer\chrmstp.exe
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\Installer
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\Installer\setup.exe
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\Locales\*.*
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\MEIPreload\*.*
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\nacl64.exe
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\notification_helper.exe
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\swiftshader\*.*
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\VisualElements\*.*
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\WidevineCdm\*.*
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\WidevineCdm\_platform_specific\*.*
C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\WidevineCdm\_platform_specific\win_x86\*.*
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe
C:\Program Files (x86)\Google\Chrome\Application\Dictionaries\*.*
C:\Program Files (x86)\Google\Chrome\Application\SetupMetrics\*.*
C:\Program Files (x86)\Google\CrashReports\*.*
C:\Program Files (x86)\Google\Policies\*.*
C:\Program Files (x86)\Google\Temp\*.*
C:\Program Files (x86)\Google\Update\*.*
C:\Program Files (x86)\Google\Update\1.3.35.451\*.*
C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleCrashHandler.exe
C:\Program Files (x86)\Google\Update\1.3.35.451
C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleCrashHandler64.exe
C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdate.exe
C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateBroker.exe
C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateComRegisterShell64.exe
C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateCore.exe
C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateOnDemand.exe
C:\Program Files (x86)\Google\Update\1.3.35.451\GoogleUpdateSetup.exe
C:\Program Files (x86)\Google\Update\1.3.35.451\Recovery\*.*
C:\Program Files (x86)\Google\Update\1.3.35.451\Recovery\GURD09E.tmp\*.*
C:\Program Files (x86)\Google\Update\Download\*.*
C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\*.*
C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\81.0.4044.113\*.*
C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\81.0.4044.113\chrome_installer.exe
C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}
C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\81.0.4044.113
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Google\Update\Install\*.*
C:\Program Files (x86)\Google\Update\Offline\*.*
C:\Program Files (x86)\Internet Explorer\*.*
C:\Program Files (x86)\Internet Explorer\en-US\*.*
C:\Program Files (x86)\Internet Explorer\ExtExport.exe
C:\Program Files (x86)\Internet Explorer
C:\Program Files (x86)\Internet Explorer\ieinstal.exe
C:\Program Files (x86)\Internet Explorer\ielowutil.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui
C:\Program Files (x86)\Internet Explorer\MUI\*.*
C:\Program Files (x86)\Internet Explorer\MUI\0409\*.*
C:\Program Files (x86)\Internet Explorer\SIGNUP\*.*
C:\Program Files (x86)\Java\*.*
C:\Program Files (x86)\Java\jre7\*.*
C:\Program Files (x86)\Java\jre7\bin\*.*
C:\Program Files (x86)\Java\jre7\bin\client\*.*
C:\Program Files (x86)\Java\jre7\bin\dtplugin\*.*
C:\Program Files (x86)\Java\jre7\bin\jabswitch.exe
C:\Program Files (x86)\Java\jre7\bin\java-rmi.exe
C:\Program Files (x86)\Java\jre7\bin\java.exe
C:\Program Files (x86)\Java\jre7\bin\javacpl.exe
C:\Program Files (x86)\Java\jre7\bin\javaw.exe
C:\Program Files (x86)\Java\jre7\bin\javaws.exe
C:\Program Files (x86)\Java\jre7\bin\jp2launcher.exe
C:\Program Files (x86)\Java\jre7\bin\jqs.exe
C:\Program Files (x86)\Java\jre7\bin\keytool.exe
C:\Program Files (x86)\Java\jre7\bin\kinit.exe
C:\Program Files (x86)\Java\jre7\bin\klist.exe
C:\Program Files (x86)\Java\jre7\bin\ktab.exe
C:\Program Files (x86)\Java\jre7\bin\orbd.exe
C:\Program Files (x86)\Java\jre7\bin\pack200.exe
C:\Program Files (x86)\Java\jre7\bin\plugin2\*.*
C:\Program Files (x86)\Java\jre7\bin\policytool.exe
C:\Program Files (x86)\Java\jre7\bin\rmid.exe
C:\Program Files (x86)\Java\jre7\bin\rmiregistry.exe
C:\Program Files (x86)\Java\jre7\bin\servertool.exe
C:\Program Files (x86)\Java\jre7\bin\ssvagent.exe
C:\Program Files (x86)\Java\jre7\bin\tnameserv.exe
C:\Program Files (x86)\Java\jre7\bin\unpack200.exe
C:\Program Files (x86)\Java\jre7\lib\*.*
C:\Program Files (x86)\Java\jre7\lib\applet\*.*
C:\Program Files (x86)\Java\jre7\lib\cmm\*.*
C:\Program Files (x86)\Java\jre7\lib\deploy\*.*
C:\Program Files (x86)\Java\jre7\lib\deploy\jqs\*.*
C:\Program Files (x86)\Java\jre7\lib\ext\*.*
C:\Program Files (x86)\Java\jre7\lib\fonts\*.*
C:\Program Files (x86)\Java\jre7\lib\i386\*.*
C:\Program Files (x86)\Java\jre7\lib\images\*.*
C:\Program Files (x86)\Java\jre7\lib\images\cursors\*.*
C:\Program Files (x86)\Java\jre7\lib\management\*.*
C:\Program Files (x86)\Java\jre7\lib\security\*.*
C:\Program Files (x86)\Java\jre7\lib\servicetag\*.*
C:\Program Files (x86)\Java\jre7\lib\zi\*.*
C:\Program Files (x86)\Java\jre7\lib\zi\Africa\*.*
C:\Program Files (x86)\Java\jre7\lib\zi\America\*.*
C:\Program Files (x86)\Java\jre7\lib\zi\America\Argentina\*.*
C:\Program Files (x86)\Java\jre7\lib\zi\America\Indiana\*.*
C:\Program Files (x86)\Java\jre7\lib\zi\America\Kentucky\*.*
C:\Program Files (x86)\Java\jre7\lib\zi\America\North_Dakota\*.*
C:\Program Files (x86)\Java\jre7\lib\zi\Antarctica\*.*
C:\Program Files (x86)\Java\jre7\lib\zi\Asia\*.*
C:\Program Files (x86)\Java\jre7\lib\zi\Atlantic\*.*
C:\Program Files (x86)\Java\jre7\lib\zi\Australia\*.*
C:\Program Files (x86)\Java\jre7\lib\zi\Etc\*.*
C:\Program Files (x86)\Java\jre7\lib\zi\Europe\*.*
C:\Program Files (x86)\Java\jre7\lib\zi\Indian\*.*
C:\Program Files (x86)\Java\jre7\lib\zi\Pacific\*.*
C:\Program Files (x86)\Java\jre7\lib\zi\SystemV\*.*
C:\Program Files (x86)\Microsoft\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\locales\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\@paulcbetts\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\@paulcbetts\cld\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\@paulcbetts\cld\build\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\@paulcbetts\cld\build\Release\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\@paulcbetts\spellchecker\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\@paulcbetts\spellchecker\build\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\@paulcbetts\spellchecker\build\Release\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\desktop-idle\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\desktop-idle\build\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\desktop-idle\build\Release\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\electron-ssid\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\electron-ssid\build\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\electron-ssid\build\Release\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\keyboard-layout\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\keyboard-layout\build\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\keyboard-layout\build\Release\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\keytar\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\keytar\build\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\keytar\build\Release\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\skype-location\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\skype-location\lib\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\skype-location\lib\ia32\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\slimcore\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\slimcore\bin\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\sqlite3\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\sqlite3\lib\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\sqlite3\lib\binding\*.*
C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe
C:\Program Files (x86)\Microsoft
C:\Program Files (x86)\Microsoft\Skype for Desktop
C:\Program Files (x86)\Microsoft\Skype for Desktop\unins000.exe
C:\Program Files (x86)\Microsoft Analysis Services\*.*
C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\*.*
C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\*.*
C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\*.*
C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\*.*
C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\*.*
C:\Program Files (x86)\Microsoft Office\*.*
C:\Program Files (x86)\Microsoft Office\CLIPART\*.*
C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\*.*
C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\*.*
C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\*.*
C:\Program Files (x86)\Microsoft Office\Data\*.*
C:\Program Files (x86)\Microsoft Office\Data\Delta\*.*
C:\Program Files (x86)\Microsoft Office\Data\Delta\root\*.*
C:\Program Files (x86)\Microsoft Office\Document Themes 14\*.*
C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\*.*
C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\*.*
C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\*.*
C:\Program Files (x86)\Microsoft Office\MEDIA\*.*
C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\*.*
C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\1033\*.*
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\*.*
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\1033\*.*
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\*.*
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\*.*
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\*.*
C:\Program Files (x86)\Microsoft Office\Office14\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\Bibliography\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\ONELEV.EXE
C:\Program Files (x86)\Microsoft Office
C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\*.*
C:\Program Files (x86)\Microsoft Office\Office14\1036\*.*
C:\Program Files (x86)\Microsoft Office\Office14\3082\*.*
C:\Program Files (x86)\Microsoft Office\Office14\AccessWeb\*.*
C:\Program Files (x86)\Microsoft Office\Office14\ACCICONS.EXE
C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ\*.*
C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\*.*
C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe
C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Sort\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\*.*
C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\*.*
C:\Program Files (x86)\Microsoft Office\Office14\CLVIEW.EXE
C:\Program Files (x86)\Microsoft Office\Office14\CNFNOT32.EXE
C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\*.*
C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Document Parts\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Document Parts\1033\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Document Parts\1033\14\*.*
C:\Program Files (x86)\Microsoft Office\Office14\en\*.*
C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
C:\Program Files (x86)\Microsoft Office\Office14\excelcnv.exe
C:\Program Files (x86)\Microsoft Office\Office14\FORMS\*.*
C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\*.*
C:\Program Files (x86)\Microsoft Office\Office14\GRAPH.EXE
C:\Program Files (x86)\Microsoft Office\Office14\Groove\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\Components\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\ManagedObjects\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\Verisign\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Places\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Things\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Americana\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Basic\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Space Templates\*.*
C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE
C:\Program Files (x86)\Microsoft Office\Office14\GROOVEMN.EXE
C:\Program Files (x86)\Microsoft Office\Office14\IEContentService.exe
C:\Program Files (x86)\Microsoft Office\Office14\INFOPATH.EXE
C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\*.*
C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\*.*
C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\*.*
C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Library\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Library\Analysis\*.*
C:\Program Files (x86)\Microsoft Office\Office14\Library\SOLVER\*.*
C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\*.*
C:\Program Files (x86)\Microsoft Office\Office14\misc.exe
C:\Program Files (x86)\Microsoft Office\Office14\MSACCESS.EXE
C:\Program Files (x86)\Microsoft Office\Office14\MSOHTMED.EXE
C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
C:\Program Files (x86)\Microsoft Office\Office14\MSOUC.EXE
C:\Program Files (x86)\Microsoft Office\Office14\MSPUB.EXE
C:\Program Files (x86)\Microsoft Office\Office14\MSQRY32.EXE
C:\Program Files (x86)\Microsoft Office\Office14\MSTORDB.EXE
C:\Program Files (x86)\Microsoft Office\Office14\MSTORE.EXE
C:\Program Files (x86)\Microsoft Office\Office14\NAMECONTROLSERVER.EXE
C:\Program Files (x86)\Microsoft Office\Office14\OIS.EXE
C:\Program Files (x86)\Microsoft Office\Office14\OneNote\*.*
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.EXE
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\*.*
C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\*.*
C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXE
C:\Program Files (x86)\Microsoft Office\Office14\PPTICO.EXE
C:\Program Files (x86)\Microsoft Office\Office14\PROOF\*.*
C:\Program Files (x86)\Microsoft Office\Office14\PROOF\1033\*.*
C:\Program Files (x86)\Microsoft Office\Office14\PROOF\1036\*.*
C:\Program Files (x86)\Microsoft Office\Office14\PROOF\3082\*.*
C:\Program Files (x86)\Microsoft Office\Office14\protocolhandler.exe
C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\*.*
C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\*.*
C:\Program Files (x86)\Microsoft Office\Office14\QUERIES\*.*
C:\Program Files (x86)\Microsoft Office\Office14\SAMPLES\*.*
C:\Program Files (x86)\Microsoft Office\Office14\SCANPST.EXE
C:\Program Files (x86)\Microsoft Office\Office14\SELFCERT.EXE
C:\Program Files (x86)\Microsoft Office\Office14\SETLANG.EXE
C:\Program Files (x86)\Microsoft Office\Office14\STARTUP\*.*
C:\Program Files (x86)\Microsoft Office\Office14\VPREVIEW.EXE
C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
C:\Program Files (x86)\Microsoft Office\Office14\Wordconv.exe
C:\Program Files (x86)\Microsoft Office\Office14\WORDICON.EXE
C:\Program Files (x86)\Microsoft Office\Office14\XLICONS.EXE
C:\Program Files (x86)\Microsoft Office\Office14\XLSTART\*.*
C:\Program Files (x86)\Microsoft Office\Office16\*.*
C:\Program Files (x86)\Microsoft Office\Office16\OSPPREARM.EXE
C:\Program Files (x86)\Microsoft Office\PackageManifests\*.*
C:\Program Files (x86)\Microsoft Office\root\*.*
C:\Program Files (x86)\Microsoft Office\root\Client\*.*
C:\Program Files (x86)\Microsoft Office\root\Client\AppVDllSurrogate32.exe
C:\Program Files (x86)\Microsoft Office\root\Client\AppVDllSurrogate64.exe
C:\Program Files (x86)\Microsoft Office\root\Client\AppVLP.exe
C:\Program Files (x86)\Microsoft Office\root\CLIPART\*.*
C:\Program Files (x86)\Microsoft Office\root\CLIPART\PUB60COR\*.*
C:\Program Files (x86)\Microsoft Office\root\CLIPART\Publisher\*.*
C:\Program Files (x86)\Microsoft Office\root\CLIPART\Publisher\Backgrounds\*.*
C:\Program Files (x86)\Microsoft Office\root\Document Themes 16\*.*
C:\Program Files (x86)\Microsoft Office\root\Document Themes 16\Theme Colors\*.*
C:\Program Files (x86)\Microsoft Office\root\Document Themes 16\Theme Effects\*.*
C:\Program Files (x86)\Microsoft Office\root\Document Themes 16\Theme Fonts\*.*
C:\Program Files (x86)\Microsoft Office\root\Flattener\*.*
C:\Program Files (x86)\Microsoft Office\root\fre\*.*
C:\Program Files (x86)\Microsoft Office\root\Integration\*.*
C:\Program Files (x86)\Microsoft Office\root\Integration\Addons\*.*
C:\Program Files (x86)\Microsoft Office\root\Integration\Integrator.exe
C:\Program Files (x86)\Microsoft Office\root\Integration
C:\Program Files (x86)\Microsoft Office\root\Licenses\*.*
C:\Program Files (x86)\Microsoft Office\root\Licenses16\*.*
C:\Program Files (x86)\Microsoft Office\root\loc\*.*
C:\Program Files (x86)\Microsoft Office\root\mcxml\*.*
C:\Program Files (x86)\Microsoft Office\root\mcxml\en-us\*.*
C:\Program Files (x86)\Microsoft Office\root\mcxml\es-es\*.*
C:\Program Files (x86)\Microsoft Office\root\mcxml\fr-fr\*.*
C:\Program Files (x86)\Microsoft Office\root\mcxml\x-none\*.*
C:\Program Files (x86)\Microsoft Office\root\Office15\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\Bibliography\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\DataServices\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBFTSCM\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\PUBSPAPR\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\QuickStyles\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\1036\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\3082\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\AccessWeb\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ACCICONS.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\ACCWIZ\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Aria\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\af\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\am\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ar\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\as\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\az-Latn-AZ\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\be\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\bg\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\bn-BD\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\bn-IN\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\bs-Latn-BA\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ca\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ca-ES-valencia\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\cs\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\cy\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\da\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\de\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\el\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\es\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\et\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\eu\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\fa\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\fi\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\fil\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\fr\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ga\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\gd\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\gl\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\gu\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\he\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\hi\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\hr\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\hu\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\hy\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\id\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\is\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\it\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ja\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ka\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\kk\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\km\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\kn\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ko\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\kok\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ky\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\lb\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\lt\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\lv\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\mi\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.Loader.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX40.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX45.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\mk\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ml\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\mn\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\mr\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ms\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\mt\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ne\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\nl\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\nn-NO\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\no\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\or\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\pa\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\pl\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\prs-AF\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\pt-BR\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\pt-pt\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\quz\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ro\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ru\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\sd-Arab-PK\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\si\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\sk\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\sl\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\sq\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\sr-Cyrl\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\sr-Cyrl-BA\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\sr-Latn\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\sr-Latn-CS\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\sv\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\sw\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ta\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\te\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\th\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\tk\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\tr\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\tt\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ug\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\uk\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ur\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\uz-Latn-UZ\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\vi\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\zh-HANS\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\zh-HANT\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\en\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\AppSharingHookController.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\AugLoop\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\Bibliography\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\Bibliography\Sort\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\Bibliography\Style\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\BORDERS\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\CLVIEW.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\CNFNOT32.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\Configuration\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\CONVERT\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\CONVERT\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\DCF\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\DCF\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\DCF\Common.DBConnection.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\DCF\Common.DBConnection64.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\DCF\Common.ShowHelp.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\DCF\DATABASECOMPARE.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\DCF\en\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\DCF\filecompare.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\DCF\SPREADSHEETCOMPARE.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\Document Parts\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\Document Parts\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\Document Parts\1033\16\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\excelcnv.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\FORMS\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\FORMS\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\FPA_f14\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\FPA_f2\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\FPA_f3\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\FPA_f33\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\FPA_f4\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\FPA_f7\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\FPA_FA000000006\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\FPA_FA000000008\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\FPA_FA000000009\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\FPA_FA000000011\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\FPA_FA000000050\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\FPA_w1\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\GRAPH.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\IEContentService.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\Library\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\Library\Analysis\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\Library\SOLVER\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\LivePersonaCard\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\LivePersonaCard\images\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\LivePersonaCard\images\default\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\LogoImages\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\lync99.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\lynchtmlconv.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\MEDIA\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\misc.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\MSACCESS.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\ar\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\bg\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\ca\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\cs\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\da\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\de\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\el\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\en-us\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\es\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\et\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\eu\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\fi\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\fr\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\gl\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\he\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\hi\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\hr\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\hu\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\id\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\it\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\ja\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\kk\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\ko\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\lt\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\lv\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\ms\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\nl\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\no\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\pl\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\pt\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\pt-BR\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\ro\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\ru\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\sk\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\sl\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\sr-Cyrl-BA\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\sr-Cyrl-RS\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\sr-Latn-RS\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\sv\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\th\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\tr\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\uk\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\vi\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\zh-CN\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\MSIPC\zh-TW\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\msoadfsb.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\msoasb.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\msoev.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\MSOHTMED.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSREC.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSYNC.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\msotd.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\MSOUC.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\MSQRY32.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\NAMECONTROLSERVER.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\OcPubMgr.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\ODBC Drivers\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ODBC Drivers\Redshift\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ODBC Drivers\Redshift\lib\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ODBC Drivers\Redshift\lib\OpenSSL32.DllA\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl32.DllA\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl32.DllA\OpenSSL32.DllA\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL32.DllA\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\officeappguardwin32.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\OLCFG.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\OneNote\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTE.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\ORGCHART.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\osfFPA\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\OutlookAutoDiscover\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\PAGESIZE\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\PDFREFLOW.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\PerfBoost.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\PersonaSpy\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\PPTICO.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\PROOF\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\PROOF\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\PROOF\1036\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\PROOF\3082\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\protocolhandler.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\PUBBA\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\PUBWIZ\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\QUERIES\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\SAMPLES\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\SCANPST.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\SDXHelper.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\SDXHelperBgt.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000018\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\lib\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\lib\native-common\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\lib\native-common\assets\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000027\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000027\assets\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000027\SharedCommentsAssets\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000027\SharedCommentsAssets\Icons\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000042\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000042\assets\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000042\assets\assets\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\sdxs\FA000000042\assets\assets\images\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\SELFCERT.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\SETLANG.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\SkypeSrv\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\SkypeSrv\SKYPESERVER.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\STARTUP\*.*
C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\VPREVIEW.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\Wordconv.exe
C:\Program Files (x86)\Microsoft Office\root\Office16\WORDICON.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\XLICONS.EXE
C:\Program Files (x86)\Microsoft Office\root\Office16\XLSTART\*.*
C:\Program Files (x86)\Microsoft Office\root\rsod\*.*
C:\Program Files (x86)\Microsoft Office\root\rsodWoW6432\*.*
C:\Program Files (x86)\Microsoft Office\root\Stationery\*.*
C:\Program Files (x86)\Microsoft Office\root\Stationery\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\Templates\*.*
C:\Program Files (x86)\Microsoft Office\root\Templates\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\Templates\1033\Access\*.*
C:\Program Files (x86)\Microsoft Office\root\Templates\1033\Access\DataType\*.*
C:\Program Files (x86)\Microsoft Office\root\Templates\1033\Access\Part\*.*
C:\Program Files (x86)\Microsoft Office\root\Templates\1033\GettingStarted16\*.*
C:\Program Files (x86)\Microsoft Office\root\Templates\1033\ONENOTE\*.*
C:\Program Files (x86)\Microsoft Office\root\Templates\1033\ONENOTE\16\*.*
C:\Program Files (x86)\Microsoft Office\root\Templates\1033\ONENOTE\16\Stationery\*.*
C:\Program Files (x86)\Microsoft Office\root\Templates\Presentation Designs\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OfficeSoftwareProtectionPlatform\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft Help\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Common Programs\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Common Programs\Microsoft Office Tools\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Fonts\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Fonts\private\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Filters\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Cultures\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\en-us\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLED.EXE
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OfficeSoftwareProtectionPlatform\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OfficeSoftwareProtectionPlatform
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\DESIGNER\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\DW\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\DW\DW20.EXE
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\DW\DWTRIG20.EXE
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\EQUATION\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\EQUATION\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\EQUATION\eqnedt32.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\EURO\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Filters\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\GRPHFLT\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\MSClientDataMgr\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\Cultures\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\DataModel\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\DataModel\Cartridges\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\DataModel\Resources\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\DataModel\Resources\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\en-us\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\FLTLDR.EXE
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\MSOICONS.EXE
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\MSOXMLED.EXE
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\Office Setup Controller\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\Office Setup Controller\Office.en-us\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\PlatformCapabilities\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Portal\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Portal\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\PROOF\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Smart Tag\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Smart Tag\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Smart Tag\LISTS\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Smart Tag\LISTS\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Smart Tag\SmartTagInstall.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Smart Tag
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Source Engine\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Source Engine\OSE.EXE
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Source Engine
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\TEXTCONV\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\AFTRNOON\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\ARCTIC\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\AXIS\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\BLENDS\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\BLUECALM\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\BLUEPRNT\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\BOLDSTRI\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\BREEZE\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\CANYON\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\CAPSULES\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\CASCADE\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\COMPASS\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\CONCRETE\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\DEEPBLUE\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\ECHO\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\ECLIPSE\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\EDGE\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\EVRGREEN\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\EXPEDITN\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\ICE\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\INDUST\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\IRIS\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\JOURNAL\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\LAYERS\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\LEVEL\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\NETWORK\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\PAPYRUS\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\PIXEL\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\PROFILE\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\QUAD\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\RADIAL\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\REFINED\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\RICEPAPR\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\RIPPLE\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\RMNSQUE\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\SATIN\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\SKY\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\SLATE\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\SONORA\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\SPRING\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\STRTEDGE\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\STUDIO\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\SUMIPNTG\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\WATER\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\WATERMAR\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\TRANSLAT\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\TRANSLAT\ENES\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\TRANSLAT\ENFR\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\TRANSLAT\ESEN\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\TRANSLAT\FREN\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\VBA\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\VBA\VBA6\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\VBA\VBA7.1\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\VBA\VBA7.1\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Web Server Extensions\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Web Server Extensions\16\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Web Server Extensions\16\BIN\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Web Server Extensions\16\BIN\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\ODBC\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\ODBC\Data Sources\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\SYSTEM\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\SYSTEM\MSMAPI\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\SYSTEM\MSMAPI\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\SYSTEM\ole db\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX64\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Office\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Office\Office16\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Office\Office16\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Office\Office16\AppSharingHookController64.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX64
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Office
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Office\Office16\MSOHTMED.EXE
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Office\Office16\OneNote\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Resources\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Resources\1033\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\SQLDumper.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft.NET\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft.NET\ADOMD.NET\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft.NET\ADOMD.NET\130\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Mozilla Firefox\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX86\Mozilla Firefox\plugins\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\System\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\assembly\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\assembly\GAC_32\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\assembly\GAC_32\Microsoft.Office.Access.BusinessDataCatalog\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\assembly\GAC_32\Microsoft.Office.Access.BusinessDataCatalog\16.0.0.0__71E9BCE111E9429C\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\assembly\GAC_MSIL\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.AnalysisServices.AdomdClient\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.AnalysisServices.AdomdClient\13.0.0.0__89845DCD8080CC91\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.AnalysisServices.SPClient.Interfaces\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.AnalysisServices.SPClient.Interfaces\13.0.0.0__89845DCD8080CC91\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.BusinessData\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.BusinessData\16.0.0.0__71E9BCE111E9429C\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Diagnostics\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Diagnostics\16.0.0.0__71E9BCE111E9429C\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.Office.BusinessData\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.Office.BusinessData\16.0.0.0__71E9BCE111E9429C\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.Office.BusinessData.Intl\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.Office.BusinessData.Intl\16.0.0.0__71E9BCE111E9429C\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\accicons.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\dbcicons.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\grv_icons.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\joticon.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\lyncicon.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\misc.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\msouc.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\ohub32.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\osmadminicon.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\osmclienticon.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\outicon.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\pj11icon.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\pptico.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\pubs.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\sscicons.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\visicon.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\wordicon.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\xlicons.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-0409-0000-0000000FF1CE}\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-0409-0000-0000000FF1CE}\misc.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-0409-0000-0000000FF1CE}
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-0000-0000000FF1CE}\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-0000-0000000FF1CE}\misc.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-0000-0000000FF1CE}
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-0C0A-0000-0000000FF1CE}\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-0C0A-0000-0000000FF1CE}\misc.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-0C0A-0000-0000000FF1CE}
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-006E-0409-0000-0000000FF1CE}\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-006E-0409-0000-0000000FF1CE}\misc.exe
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-006E-0409-0000-0000000FF1CE}
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\PCHEALTH\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\PCHEALTH\ERRORREP\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\PCHEALTH\ERRORREP\QHEADLES\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\PCHEALTH\ERRORREP\QSIGNOFF\*.*
C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\SHELLNEW\*.*
C:\Program Files (x86)\Microsoft Office\root\vreg\*.*
C:\Program Files (x86)\Microsoft Office\root\vregwow6432\*.*
C:\Program Files (x86)\Microsoft Office\Stationery\*.*
C:\Program Files (x86)\Microsoft Office\Stationery\1033\*.*
C:\Program Files (x86)\Microsoft Office\Templates\*.*
C:\Program Files (x86)\Microsoft Office\Templates\1033\*.*
C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\*.*
C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\*.*
C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\*.*
C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\WSS\*.*
C:\Program Files (x86)\Microsoft Office\Templates\1033\FAX\*.*
C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\*.*
C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\*.*
C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\*.*
C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\*.*
C:\Program Files (x86)\Microsoft Office\Templates\Presentation Designs\*.*
C:\Program Files (x86)\Microsoft Office\Updates\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Apply\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Apply\FilesInUse\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Apply\FilesInUse\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Apply\FilesInUse\93726C46-CD0D-4034-B40C-524B791E4B26\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Detection\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Detection\Version\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\ADDINS\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Document.XmlSerializers.dll\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\cpprestsdk.dll\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\IEAWSDC.DLL\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\microsoft.office.workflow.actions.proxy.dll\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\microsoft.sharepoint.workflowactions.proxy.dll\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\ar\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\ar\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\bg\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\bg\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\ca\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\ca\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\cs\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\cs\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\da\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\da\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\el\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\el\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\en-us\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\en-us\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\es\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\es\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\eu\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\eu\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\fi\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\fi\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\gl\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\gl\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\he\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\he\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\hi\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\hi\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\hr\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\hr\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\hu\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\hu\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\id\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\id\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\kk\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\kk\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\lt\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\lt\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\lv\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\lv\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\ms\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\ms\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\no\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\no\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\pl\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\pl\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\pt-BR\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\pt-BR\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\ro\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\ro\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\ru\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\ru\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\sk\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\sk\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\sl\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\sl\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\sr-Cyrl-BA\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\sr-Cyrl-BA\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\sr-Cyrl-RS\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\sr-Cyrl-RS\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\sr-Latn-RS\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\sr-Latn-RS\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\th\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\th\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\tr\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\tr\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\uk\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\uk\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\vi\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\vi\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\zh-CN\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\zh-CN\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\zh-TW\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\MSIPC\zh-TW\msipc.dll.mui\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\OMICAUT.DLL\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\PROOF\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\PROOF\MSSP7ES.LEX\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\PROOF\msth8ES.LEX\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\Office16\SignalRClient.dll\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\vfs\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\vfs\ProgramFilesX64\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\vfs\ProgramFilesX64\Microsoft Office\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\vfs\ProgramFilesX64\Microsoft Office\Office16\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\Data\Delta\root\vfs\ProgramFilesX64\Microsoft Office\Office16\IEAWSDC.DLL\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\PackageManifests\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Client\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Client\AppVDllSurrogate32.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Client\AppVLP.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\CLIPART\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\CLIPART\PUB60COR\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\CLIPART\Publisher\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\CLIPART\Publisher\Backgrounds\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Document Themes 16\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Document Themes 16\Theme Colors\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Document Themes 16\Theme Effects\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Document Themes 16\Theme Fonts\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\fre\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Integration\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Integration\Integrator.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Integration
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Licenses\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Licenses16\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\loc\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office15\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\1033\Bibliography\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\1033\DataServices\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\1033\PUBFTSCM\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\1033\PUBSPAPR\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\1033\QuickStyles\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\1036\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\3082\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\AccessWeb\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ACCICONS.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ACCWIZ\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ADDINS\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ADDINS\EduWorks Data Streamer Add-In\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.Loader.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX40.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX45.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ADDINS\Power Map Excel Add-in\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ADDINS\Power View Excel Add-in\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ADDINS\PowerPivot Excel Add-in\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ADDINS\PowerPivot Excel Add-in\en\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\AppSharingHookController.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\AugLoop\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\Bibliography\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\Bibliography\Sort\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\Bibliography\Style\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\BORDERS\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\CLVIEW.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\CNFNOT32.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\Configuration\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\CONVERT\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\CONVERT\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\DCF\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\DCF\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\DCF\Common.DBConnection.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\DCF\Common.DBConnection64.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\DCF\Common.ShowHelp.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\DCF\DATABASECOMPARE.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\DCF\en\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\DCF\filecompare.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\DCF\SPREADSHEETCOMPARE.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\Document Parts\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\Document Parts\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\Document Parts\1033\16\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\EXCEL.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\excelcnv.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\FORMS\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\FORMS\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\FPA_f14\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\FPA_f2\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\FPA_f3\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\FPA_f33\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\FPA_f4\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\FPA_f7\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\FPA_FA000000006\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\FPA_FA000000008\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\FPA_FA000000009\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\FPA_FA000000011\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\FPA_FA000000050\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\FPA_w1\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\GRAPH.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\IEContentService.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\Library\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\Library\Analysis\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\Library\SOLVER\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\LivePersonaCard\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\LivePersonaCard\images\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\LivePersonaCard\images\default\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\LogoImages\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\lync.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\lync99.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\lynchtmlconv.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\Media\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSACCESS.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\ar\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\bg\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\ca\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\cs\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\da\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\de\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\el\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\en-us\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\es\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\et\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\eu\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\fi\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\fr\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\gl\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\he\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\hi\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\hr\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\hu\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\id\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\it\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\ja\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\kk\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\ko\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\lt\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\lv\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\ms\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\nl\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\no\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\pl\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\pt\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\pt-BR\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\ro\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\ru\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\sk\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\sl\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\sr-Cyrl-BA\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\sr-Cyrl-RS\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\sr-Latn-RS\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\sv\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\th\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\tr\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\uk\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\vi\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\zh-CN\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSIPC\zh-TW\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\msoadfsb.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\msoasb.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\msoev.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSOHTMED.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\msoia.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSOSREC.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSOSYNC.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\msotd.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSOUC.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSPUB.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\MSQRY32.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\NAMECONTROLSERVER.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\OcPubMgr.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ODBC Drivers\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ODBC Drivers\Redshift\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ODBC Drivers\Redshift\lib\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ODBC Drivers\Redshift\lib\OpenSSL32.DllA\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ODBC Drivers\Salesforce\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ODBC Drivers\Salesforce\lib\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ODBC Drivers\Salesforce\lib\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl32.DllA\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl32.DllA\OpenSSL32.DllA\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL32.DllA\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\officeappguardwin32.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\officebackgroundtaskhandler.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\OLCFG.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\OneNote\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ONENOTE.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ONENOTEM.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\ORGCHART.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\osfFPA\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\OUTLOOK.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\OutlookAutoDiscover\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\PAGESIZE\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\PDFREFLOW.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\PerfBoost.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\PersonaSpy\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\POWERPNT.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\PPTICO.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\PROOF\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\protocolhandler.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\PUBBA\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\PUBWIZ\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\QUERIES\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\SAMPLES\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\SCANPST.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\SDXHelper.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\SDXHelperBgt.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\sdxs\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\sdxs\FA000000018\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\sdxs\FA000000018\cardview\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\sdxs\FA000000018\cardview\lib\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\sdxs\FA000000018\cardview\lib\native-common\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\sdxs\FA000000018\cardview\lib\native-common\assets\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\sdxs\FA000000027\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\sdxs\FA000000027\assets\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\sdxs\FA000000027\assets\Icons\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\sdxs\FA000000042\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\sdxs\FA000000042\assets\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\sdxs\FA000000042\assets\assets\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\sdxs\FA000000042\assets\assets\images\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\SELFCERT.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\SETLANG.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\SkypeSrv\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\SkypeSrv\SKYPESERVER.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\STARTUP\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\UcMapi.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\VPREVIEW.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\WINWORD.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\Wordconv.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\WORDICON.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\XLICONS.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Office16\XLSTART\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\rsod\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\rsodWoW6432\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Stationery\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Stationery\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Templates\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Templates\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Templates\1033\Access\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Templates\1033\Access\DataType\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Templates\1033\Access\Part\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Templates\1033\GettingStarted16\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Templates\1033\ONENOTE\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Templates\1033\ONENOTE\16\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Templates\1033\ONENOTE\16\Stationery\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\Templates\Presentation Designs\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Common AppData\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Common AppData\Microsoft\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Common AppData\Microsoft\OFFICE\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Common AppData\Microsoft\OfficeSoftwareProtectionPlatform\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Fonts\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Fonts\private\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX64\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX64\Microsoft Shared\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Filters\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Cultures\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\en-us\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLED.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX64
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX64\Microsoft Shared
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OfficeSoftwareProtectionPlatform\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\DESIGNER\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\DW\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\DW\DW20.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\DW\DWTRIG20.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\EQUATION\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\EQUATION\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\EURO\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Filters\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\GRPHFLT\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Help\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\MSClientDataMgr\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\Cultures\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\DataModel\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\DataModel\Cartridges\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\DataModel\Resources\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\DataModel\Resources\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\en-us\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\FLTLDR.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\MSOXMLED.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\Office Setup Controller\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\Office Setup Controller\Office.en-us\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\PlatformCapabilities\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Portal\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Portal\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\PROOF\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Smart Tag\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Smart Tag\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Smart Tag\LISTS\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Smart Tag\LISTS\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Smart Tag\SmartTagInstall.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Smart Tag
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Source Engine\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Source Engine\OSE.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Source Engine
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\TEXTCONV\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\AFTRNOON\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\ARCTIC\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\AXIS\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\BLENDS\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\BLUECALM\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\BLUEPRNT\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\BOLDSTRI\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\BREEZE\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\CANYON\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\CAPSULES\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\CASCADE\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\COMPASS\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\CONCRETE\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\DEEPBLUE\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\ECHO\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\ECLIPSE\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\EDGE\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\EVRGREEN\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\EXPEDITN\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\ICE\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\INDUST\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\IRIS\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\JOURNAL\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\LAYERS\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\LEVEL\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\NETWORK\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\PAPYRUS\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\PIXEL\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\PROFILE\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\QUAD\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\RADIAL\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\REFINED\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\RICEPAPR\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\RIPPLE\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\RMNSQUE\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\SATIN\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\SKY\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\SLATE\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\SONORA\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\SPRING\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\STRTEDGE\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\STUDIO\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\SUMIPNTG\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\WATER\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\THEMES16\WATERMAR\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\TRANSLAT\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\TRANSLAT\ENES\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\TRANSLAT\ENFR\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\TRANSLAT\ESEN\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\TRANSLAT\FREN\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\VBA\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\VBA\VBA6\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\VBA\VBA7.1\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\VBA\VBA7.1\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Web Server Extensions\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Web Server Extensions\16\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Web Server Extensions\16\BIN\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Web Server Extensions\16\BIN\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\ODBC\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\ODBC\Data Sources\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\SYSTEM\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\SYSTEM\MSMAPI\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\SYSTEM\MSMAPI\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesCommonX86\SYSTEM\ole db\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX64\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX64\Microsoft Office\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX64\Microsoft Office\Office16\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX64\Microsoft Office\Office16\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX64\Microsoft Office\Office16\AppSharingHookController64.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX64
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX64\Microsoft Office
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX64\Microsoft Office\Office16\MSOHTMED.EXE
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX64\Microsoft Office\Office16\OneNote\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Microsoft Analysis Services\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Resources\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Resources\1033\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\SQLDumper.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Microsoft Analysis Services
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Microsoft Office\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Microsoft SQL Server\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Microsoft.NET\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Microsoft.NET\ADOMD.NET\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Microsoft.NET\ADOMD.NET\130\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Mozilla Firefox\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\ProgramFilesX86\Mozilla Firefox\plugins\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\System\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\SystemX86\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\assembly\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\assembly\GAC_32\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\assembly\GAC_32\Microsoft.Office.Access.BusinessDataCatalog\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\assembly\GAC_32\Microsoft.Office.Access.BusinessDataCatalog\16.0.0.0__71E9BCE111E9429C\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\assembly\GAC_MSIL\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.AnalysisServices.AdomdClient\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.AnalysisServices.AdomdClient\13.0.0.0__89845DCD8080CC91\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.AnalysisServices.SPClient.Interfaces\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.AnalysisServices.SPClient.Interfaces\13.0.0.0__89845DCD8080CC91\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.BusinessData\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.BusinessData\16.0.0.0__71E9BCE111E9429C\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Diagnostics\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Diagnostics\16.0.0.0__71E9BCE111E9429C\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.Office.BusinessData\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.Office.BusinessData\16.0.0.0__71E9BCE111E9429C\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.Office.BusinessData.Intl\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.Office.BusinessData.Intl\16.0.0.0__71E9BCE111E9429C\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\accicons.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\dbcicons.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\grv_icons.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\joticon.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\lyncicon.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\misc.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\msouc.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\ohub32.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\osmadminicon.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\osmclienticon.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\outicon.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\pj11icon.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\pptico.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\pubs.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\sscicons.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\visicon.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\wordicon.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\xlicons.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-001F-0409-0000-0000000FF1CE}\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-001F-0409-0000-0000000FF1CE}\misc.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-001F-0409-0000-0000000FF1CE}
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-001F-040C-0000-0000000FF1CE}\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-001F-040C-0000-0000000FF1CE}\misc.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-001F-040C-0000-0000000FF1CE}
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-001F-0C0A-0000-0000000FF1CE}\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-001F-0C0A-0000-0000000FF1CE}\misc.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-001F-0C0A-0000-0000000FF1CE}
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-006E-0409-0000-0000000FF1CE}\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-006E-0409-0000-0000000FF1CE}\misc.exe
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\Installer\{90160000-006E-0409-0000-0000000FF1CE}
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\PCHEALTH\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\PCHEALTH\ERRORREP\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\PCHEALTH\ERRORREP\QHEADLES\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\PCHEALTH\ERRORREP\QSIGNOFF\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vfs\Windows\SHELLNEW\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vreg\*.*
C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\root\vregwow6432\*.*
C:\Program Files (x86)\Microsoft Silverlight\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\agcp.exe
C:\Program Files (x86)\Microsoft Silverlight
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\ar\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\bg\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\ca\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\coregen.exe
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\cs\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\da\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\de\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\el\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\es\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\et\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\eu\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\fi\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\fr\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\he\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\hr\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\hu\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\id\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\it\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\ja\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\ko\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\lt\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\lv\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\ms\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\nl\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\no\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\pl\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\pt\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\pt-BR\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\ro\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\ru\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\Silverlight.Configuration.exe
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\sk\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\sl\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\sr-Cyrl-CS\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\sr-Latn-CS\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\sv\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\th\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\tr\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\uk\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\vi\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\zh-Hans\*.*
C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\zh-Hant\*.*
C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe
C:\Program Files (x86)\Microsoft SQL Server Compact Edition\*.*
C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\*.*
C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\Desktop\*.*
C:\Program Files (x86)\Microsoft Sync Framework\*.*
C:\Program Files (x86)\Microsoft Sync Framework\v1.0\*.*
C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Documentation\*.*
C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Documentation\1033\*.*
C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Documentation\1033\License Agreements\*.*
C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\*.*
C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\*.*
C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\resources\*.*
C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\resources\1033\*.*
C:\Program Files (x86)\Microsoft Synchronization Services\*.*
C:\Program Files (x86)\Microsoft Synchronization Services\ADO.NET\*.*
C:\Program Files (x86)\Microsoft Synchronization Services\ADO.NET\v1.0\*.*
C:\Program Files (x86)\Microsoft Visual Studio 8\*.*
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\*.*
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\*.*
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\*.*
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\*.*
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\*.*
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\*.*
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\*.*
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\*.*
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\*.*
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\*.*
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\Packages\*.*
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\Packages\Debugger\*.*
C:\Program Files (x86)\Microsoft Visual Studio 8\SDK\*.*
C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\*.*
C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\*.*
C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\1033\*.*
C:\Program Files (x86)\Microsoft.NET\*.*
C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\*.*
C:\Program Files (x86)\Microsoft.NET\RedistList\*.*
C:\Program Files (x86)\Mozilla Firefox\*.*
C:\Program Files (x86)\Mozilla Firefox\browser\*.*
C:\Program Files (x86)\Mozilla Firefox\browser\features\*.*
C:\Program Files (x86)\Mozilla Firefox\browser\META-INF\*.*
C:\Program Files (x86)\Mozilla Firefox\browser\VisualElements\*.*
C:\Program Files (x86)\Mozilla Firefox\crashreporter.exe
C:\Program Files (x86)\Mozilla Firefox
C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe
C:\Program Files (x86)\Mozilla Firefox\defaults\*.*
C:\Program Files (x86)\Mozilla Firefox\defaults\pref\*.*
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\fonts\*.*
C:\Program Files (x86)\Mozilla Firefox\gmp-clearkey\*.*
C:\Program Files (x86)\Mozilla Firefox\gmp-clearkey\0.1\*.*
C:\Program Files (x86)\Mozilla Firefox\maintenanceservice.exe
C:\Program Files (x86)\Mozilla Firefox\maintenanceservice_installer.exe
C:\Program Files (x86)\Mozilla Firefox\META-INF\*.*
C:\Program Files (x86)\Mozilla Firefox\minidump-analyzer.exe
C:\Program Files (x86)\Mozilla Firefox\pingsender.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-hang-ui.exe
C:\Program Files (x86)\Mozilla Firefox\uninstall\*.*
C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
C:\Program Files (x86)\Mozilla Firefox\uninstall
C:\Program Files (x86)\Mozilla Firefox\updater.exe
C:\Program Files (x86)\Mozilla Maintenance Service\*.*
C:\Program Files (x86)\Mozilla Maintenance Service\logs\*.*
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
C:\Program Files (x86)\Mozilla Maintenance Service
C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe
C:\Program Files (x86)\Mozilla Thunderbird\*.*
C:\Program Files (x86)\Mozilla Thunderbird\chrome\*.*
C:\Program Files (x86)\Mozilla Thunderbird\chrome\icons\*.*
C:\Program Files (x86)\Mozilla Thunderbird\chrome\icons\default\*.*
C:\Program Files (x86)\Mozilla Thunderbird\crashreporter.exe
C:\Program Files (x86)\Mozilla Thunderbird
C:\Program Files (x86)\Mozilla Thunderbird\defaults\*.*
C:\Program Files (x86)\Mozilla Thunderbird\defaults\messenger\*.*
C:\Program Files (x86)\Mozilla Thunderbird\defaults\pref\*.*
C:\Program Files (x86)\Mozilla Thunderbird\dictionaries\*.*
C:\Program Files (x86)\Mozilla Thunderbird\distribution\*.*
C:\Program Files (x86)\Mozilla Thunderbird\distribution\extensions\*.*
C:\Program Files (x86)\Mozilla Thunderbird\extensions\*.*
C:\Program Files (x86)\Mozilla Thunderbird\features\*.*
C:\Program Files (x86)\Mozilla Thunderbird\fonts\*.*
C:\Program Files (x86)\Mozilla Thunderbird\isp\*.*
C:\Program Files (x86)\Mozilla Thunderbird\maintenanceservice.exe
C:\Program Files (x86)\Mozilla Thunderbird\maintenanceservice_installer.exe
C:\Program Files (x86)\Mozilla Thunderbird\minidump-analyzer.exe
C:\Program Files (x86)\Mozilla Thunderbird\pingsender.exe
C:\Program Files (x86)\Mozilla Thunderbird\plugin-container.exe
C:\Program Files (x86)\Mozilla Thunderbird\plugin-hang-ui.exe
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Program Files (x86)\Mozilla Thunderbird\uninstall\*.*
C:\Program Files (x86)\Mozilla Thunderbird\uninstall\helper.exe
C:\Program Files (x86)\Mozilla Thunderbird\uninstall
C:\Program Files (x86)\Mozilla Thunderbird\updater.exe
C:\Program Files (x86)\Mozilla Thunderbird\VisualElements\*.*
C:\Program Files (x86)\Mozilla Thunderbird\WSEnable.exe
C:\Program Files (x86)\MSBuild\*.*
C:\Program Files (x86)\MSBuild\Microsoft\*.*
C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\*.*
C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\*.*
C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\*.*
C:\Program Files (x86)\Reference Assemblies\*.*
C:\Program Files (x86)\Reference Assemblies\Microsoft\*.*
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\*.*
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\*.*
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\*.*
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\SubsetList\*.*
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\*.*
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\*.*
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\SubsetList\*.*
C:\Program Files (x86)\Slack\*.*
C:\Program Files (x86)\Slack\locales\*.*
C:\Program Files (x86)\Slack\resources\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@nodert-win10-au\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@nodert-win10-au\windows.applicationmodel\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@nodert-win10-au\windows.applicationmodel\build\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@nodert-win10-au\windows.applicationmodel\build\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@nodert-win10-au\windows.data.xml.dom\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@nodert-win10-au\windows.data.xml.dom\build\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@nodert-win10-au\windows.data.xml.dom\build\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@nodert-win10-au\windows.foundation\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@nodert-win10-au\windows.foundation\build\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@nodert-win10-au\windows.foundation\build\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@nodert-win10-au\windows.ui.notifications\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@nodert-win10-au\windows.ui.notifications\build\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@nodert-win10-au\windows.ui.notifications\build\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@nodert-win10-au\windows.ui.startscreen\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@nodert-win10-au\windows.ui.startscreen\build\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@nodert-win10-au\windows.ui.startscreen\build\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@paulcbetts\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@paulcbetts\cld\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@paulcbetts\cld\build\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@paulcbetts\cld\build\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@paulcbetts\spellchecker\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@paulcbetts\spellchecker\build\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@paulcbetts\spellchecker\build\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@paulcbetts\system-idle-time\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@paulcbetts\system-idle-time\build\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@paulcbetts\system-idle-time\build\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@slack\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@slack\slack-calls\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@slack\slack-calls\build\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\@slack\slack-calls\build\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\electron-windows-secondary-tiles\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\electron-windows-secondary-tiles\build\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\electron-windows-secondary-tiles\build\Debug\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\electron-windows-secondary-tiles\build\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\electron-windows-secondary-tiles\SecondaryTilesLib\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\electron-windows-secondary-tiles\SecondaryTilesLib\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\electron-windows-secondary-tiles\SecondaryTilesLib\x64\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\electron-windows-secondary-tiles\SecondaryTilesLib\x64\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\keyboard-layout\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\keyboard-layout\build\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\keyboard-layout\build\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\keytar\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\keytar\build\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\keytar\build\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\node-mac-notifier\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\node-mac-notifier\build\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\node-mac-notifier\build\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\runas\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\runas\build\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\runas\build\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\windows-active-process\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\windows-active-process\build\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\windows-active-process\build\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\windows-notification-state\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\windows-notification-state\build\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\windows-notification-state\build\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\windows-quiet-hours\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\windows-quiet-hours\build\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\node_modules\windows-quiet-hours\build\Release\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\src\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\src\static\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\src\static\override\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\src\static\plastic\*.*
C:\Program Files (x86)\Slack\resources\app.asar.unpacked\src\static\slack_kit\*.*
C:\Program Files (x86)\Slack\Slack.exe
C:\Program Files (x86)\Slack\src\*.*
C:\Program Files (x86)\Slack\src\static\*.*
C:\Program Files (x86)\Slack\Update.exe
C:\Program Files (x86)\Uninstall Information\*.*
C:\Program Files (x86)\Windows Defender\*.*
C:\Program Files (x86)\Windows Defender\en-US\*.*
C:\Program Files (x86)\Windows Mail\*.*
C:\Program Files (x86)\Windows Mail\en-US\*.*
C:\Program Files (x86)\Windows Mail\wab.exe
C:\Program Files (x86)\Windows Mail
C:\Program Files (x86)\Windows Mail\wabmig.exe
C:\Program Files (x86)\Windows Mail\WinMail.exe
C:\Program Files (x86)\Windows Media Player\*.*
C:\Program Files (x86)\Windows Media Player\en-US\*.*
C:\Program Files (x86)\Windows Media Player\Icons\*.*
C:\Program Files (x86)\Windows Media Player\Media Renderer\*.*
C:\Program Files (x86)\Windows Media Player\Network Sharing\*.*
C:\Program Files (x86)\Windows Media Player\setup_wm.exe
C:\Program Files (x86)\Windows Media Player
C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui
C:\Program Files (x86)\Windows Media Player\Skins\*.*
C:\Program Files (x86)\Windows Media Player\Visualizations\*.*
C:\Program Files (x86)\Windows Media Player\wmlaunch.exe
C:\Program Files (x86)\Windows Media Player\wmpconfig.exe
C:\Program Files (x86)\Windows Media Player\WMPDMC.exe
C:\Program Files (x86)\Windows Media Player\wmpenc.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui
C:\Program Files (x86)\Windows Media Player\wmprph.exe
C:\Program Files (x86)\Windows Media Player\wmpshare.exe
C:\Program Files (x86)\Windows NT\*.*
C:\Program Files (x86)\Windows NT\Accessories\*.*
C:\Program Files (x86)\Windows NT\Accessories\en-US\*.*
C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
C:\Program Files (x86)\Windows NT
C:\Program Files (x86)\Windows NT\Accessories
C:\Program Files (x86)\Windows NT\TableTextService\*.*
C:\Program Files (x86)\Windows NT\TableTextService\en-US\*.*
C:\Program Files (x86)\Windows Photo Viewer\*.*
C:\Program Files (x86)\Windows Photo Viewer\en-US\*.*
C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe
C:\Program Files (x86)\Windows Photo Viewer
C:\Program Files (x86)\Windows Portable Devices\*.*
C:\Program Files (x86)\Windows Sidebar\*.*
C:\Program Files (x86)\Windows Sidebar\en-US\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\js\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\css\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\js\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\css\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\js\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\on_desktop\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\*.*
C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\*.*
C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\*.*
C:\Program Files (x86)\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Windows Sidebar
C:\Program Files (x86)\WindowsPowerShell\*.*
C:\Program Files (x86)\WindowsPowerShell\Configuration\*.*
C:\Program Files (x86)\WindowsPowerShell\Configuration\Registration\*.*
C:\Program Files (x86)\WindowsPowerShell\Configuration\Schema\*.*
C:\Program Files (x86)\WindowsPowerShell\Modules\*.*
C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\*.*
C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\*.*
C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\en\*.*
C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\*.*
C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\*.*
C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\en-US\*.*
C:\ProgramData\*.*
C:\ProgramData\Adobe\*.*
C:\ProgramData\Adobe\Acrobat\*.*
C:\ProgramData\Adobe\Acrobat\11.0\*.*
C:\ProgramData\Adobe\Acrobat\11.0\Replicate\*.*
C:\ProgramData\Adobe\Acrobat\11.0\Replicate\Security\*.*
C:\ProgramData\Adobe\Setup\*.*
C:\ProgramData\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-AB0000000001}\*.*
C:\ProgramData\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-AB0000000001}\setup.exe
C:\ProgramData
C:\ProgramData\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-AB0000000001}
C:\ProgramData\Application Data\*.*
C:\ProgramData\chocolatey\*.*
C:\ProgramData\chocolatey\.chocolatey\*.*
C:\ProgramData\chocolatey\.chocolatey\7zip.install.18.6\*.*
C:\ProgramData\chocolatey\.chocolatey\ccenhancer.4.5.1\*.*
C:\ProgramData\chocolatey\.chocolatey\ccleaner.5.52.6967\*.*
C:\ProgramData\chocolatey\.chocolatey\chocolatey-core.extension.1.3.3\*.*
C:\ProgramData\chocolatey\.chocolatey\chocolatey-windowsupdate.extension.1.0.3\*.*
C:\ProgramData\chocolatey\.chocolatey\dotnet4.7.2.4.7.2.20180712\*.*
C:\ProgramData\chocolatey\.chocolatey\dotnetfx.4.7.2.20180712\*.*
C:\ProgramData\chocolatey\.chocolatey\filezilla.3.40.0\*.*
C:\ProgramData\chocolatey\.chocolatey\gimp.2.10.8\*.*
C:\ProgramData\chocolatey\.chocolatey\IrfanView.4.52\*.*
C:\ProgramData\chocolatey\.chocolatey\KB2919355.1.0.20160915\*.*
C:\ProgramData\chocolatey\.chocolatey\KB2919442.1.0.20160915\*.*
C:\ProgramData\chocolatey\.chocolatey\KB2999226.1.0.20181019\*.*
C:\ProgramData\chocolatey\.chocolatey\KB3033929.1.0.4\*.*
C:\ProgramData\chocolatey\.chocolatey\KB3035131.1.0.2\*.*
C:\ProgramData\chocolatey\.chocolatey\notepadplusplus.install.7.6.3\*.*
C:\ProgramData\chocolatey\.chocolatey\pidgin.2.13.0\*.*
C:\ProgramData\chocolatey\.chocolatey\skype.8.38.0.138\*.*
C:\ProgramData\chocolatey\.chocolatey\slack.3.3.7\*.*
C:\ProgramData\chocolatey\.chocolatey\speccy.1.32.740\*.*
C:\ProgramData\chocolatey\.chocolatey\spotify.1.0.80.474\*.*
C:\ProgramData\chocolatey\.chocolatey\thunderbird.60.5.0\*.*
C:\ProgramData\chocolatey\.chocolatey\vcredist-all.1.0.0\*.*
C:\ProgramData\chocolatey\.chocolatey\vcredist140.14.16.27024.1\*.*
C:\ProgramData\chocolatey\.chocolatey\vcredist2005.8.1.0.20160118\*.*
C:\ProgramData\chocolatey\.chocolatey\vcredist2008.9.0.30729.6161\*.*
C:\ProgramData\chocolatey\.chocolatey\vcredist2010.10.0.40219.2\*.*
C:\ProgramData\chocolatey\.chocolatey\vcredist2012.11.0.61031\*.*
C:\ProgramData\chocolatey\.chocolatey\vcredist2013.12.0.40660.20180427\*.*
C:\ProgramData\chocolatey\.chocolatey\vcredist2015.14.0.24215.20170201\*.*
C:\ProgramData\chocolatey\.chocolatey\vcredist2017.14.16.27024.1\*.*
C:\ProgramData\chocolatey\.chocolatey\vlc.3.0.6\*.*
C:\ProgramData\chocolatey\.chocolatey\winrar.5.61\*.*
C:\ProgramData\chocolatey\bin\*.*
C:\ProgramData\chocolatey\bin\7z.exe
C:\ProgramData\chocolatey
C:\ProgramData\chocolatey\bin\choco.exe
C:\ProgramData\chocolatey\bin\chocolatey.exe
C:\ProgramData\chocolatey\bin\cinst.exe
C:\ProgramData\chocolatey\bin\clist.exe
C:\ProgramData\chocolatey\bin\cpack.exe
C:\ProgramData\chocolatey\bin\cpush.exe
C:\ProgramData\chocolatey\bin\cuninst.exe
C:\ProgramData\chocolatey\bin\cup.exe
C:\ProgramData\chocolatey\bin\cver.exe
C:\ProgramData\chocolatey\bin\notepad++.exe
C:\ProgramData\chocolatey\choco.exe
C:\ProgramData\chocolatey\config\*.*
C:\ProgramData\chocolatey\extensions\*.*
C:\ProgramData\chocolatey\extensions\chocolatey-core\*.*
C:\ProgramData\chocolatey\extensions\chocolatey-windowsupdate\*.*
C:\ProgramData\chocolatey\helpers\*.*
C:\ProgramData\chocolatey\helpers\functions\*.*
C:\ProgramData\chocolatey\lib\*.*
C:\ProgramData\chocolatey\lib\7zip.install\*.*
C:\ProgramData\chocolatey\lib\7zip.install\legal\*.*
C:\ProgramData\chocolatey\lib\7zip.install\tools\*.*
C:\ProgramData\chocolatey\lib\ccleaner\*.*
C:\ProgramData\chocolatey\lib\ccleaner\tools\*.*
C:\ProgramData\chocolatey\lib\chocolatey\*.*
C:\ProgramData\chocolatey\lib\chocolatey-core.extension\*.*
C:\ProgramData\chocolatey\lib\chocolatey-core.extension\extensions\*.*
C:\ProgramData\chocolatey\lib\chocolatey-windowsupdate.extension\*.*
C:\ProgramData\chocolatey\lib\chocolatey-windowsupdate.extension\extensions\*.*
C:\ProgramData\chocolatey\lib\dotnet4.7.2\*.*
C:\ProgramData\chocolatey\lib\dotnetfx\*.*
C:\ProgramData\chocolatey\lib\dotnetfx\tools\*.*
C:\ProgramData\chocolatey\lib\filezilla\*.*
C:\ProgramData\chocolatey\lib\filezilla\legal\*.*
C:\ProgramData\chocolatey\lib\filezilla\tools\*.*
C:\ProgramData\chocolatey\lib\gimp\*.*
C:\ProgramData\chocolatey\lib\gimp\legal\*.*
C:\ProgramData\chocolatey\lib\gimp\tools\*.*
C:\ProgramData\chocolatey\lib\IrfanView\*.*
C:\ProgramData\chocolatey\lib\IrfanView\tools\*.*
C:\ProgramData\chocolatey\lib\KB2919355\*.*
C:\ProgramData\chocolatey\lib\KB2919355\tools\*.*
C:\ProgramData\chocolatey\lib\KB2919442\*.*
C:\ProgramData\chocolatey\lib\KB2919442\tools\*.*
C:\ProgramData\chocolatey\lib\notepadplusplus.install\*.*
C:\ProgramData\chocolatey\lib\notepadplusplus.install\legal\*.*
C:\ProgramData\chocolatey\lib\notepadplusplus.install\tools\*.*
C:\ProgramData\chocolatey\lib\skype\*.*
C:\ProgramData\chocolatey\lib\skype\tools\*.*
C:\ProgramData\chocolatey\lib\slack\*.*
C:\ProgramData\chocolatey\lib\slack\tools\*.*
C:\ProgramData\chocolatey\lib\speccy\*.*
C:\ProgramData\chocolatey\lib\speccy\tools\*.*
C:\ProgramData\chocolatey\lib\thunderbird\*.*
C:\ProgramData\chocolatey\lib\thunderbird\tools\*.*
C:\ProgramData\chocolatey\lib\vcredist-all\*.*
C:\ProgramData\chocolatey\lib\vcredist2005\*.*
C:\ProgramData\chocolatey\lib\vcredist2005\tools\*.*
C:\ProgramData\chocolatey\lib\vcredist2015\*.*
C:\ProgramData\chocolatey\lib\vcredist2017\*.*
C:\ProgramData\chocolatey\lib\vlc\*.*
C:\ProgramData\chocolatey\lib\vlc\legal\*.*
C:\ProgramData\chocolatey\lib\vlc\tools\*.*
C:\ProgramData\chocolatey\lib\winrar\*.*
C:\ProgramData\chocolatey\lib\winrar\tools\*.*
C:\ProgramData\chocolatey\lib-bad\*.*
C:\ProgramData\chocolatey\lib-bad\ccenhancer\*.*
C:\ProgramData\chocolatey\lib-bad\ccenhancer\tools\*.*
C:\ProgramData\chocolatey\lib-bad\KB2999226\*.*
C:\ProgramData\chocolatey\lib-bad\KB2999226\tools\*.*
C:\ProgramData\chocolatey\lib-bad\KB3033929\*.*
C:\ProgramData\chocolatey\lib-bad\KB3033929\Tools\*.*
C:\ProgramData\chocolatey\lib-bad\KB3035131\*.*
C:\ProgramData\chocolatey\lib-bad\KB3035131\Tools\*.*
C:\ProgramData\chocolatey\lib-bad\pidgin\*.*
C:\ProgramData\chocolatey\lib-bad\pidgin\tools\*.*
C:\ProgramData\chocolatey\lib-bad\spotify\*.*
C:\ProgramData\chocolatey\lib-bad\spotify\tools\*.*
C:\ProgramData\chocolatey\lib-bad\vcredist140\*.*
C:\ProgramData\chocolatey\lib-bad\vcredist140\tools\*.*
C:\ProgramData\chocolatey\lib-bad\vcredist2008\*.*
C:\ProgramData\chocolatey\lib-bad\vcredist2008\tools\*.*
C:\ProgramData\chocolatey\lib-bad\vcredist2010\*.*
C:\ProgramData\chocolatey\lib-bad\vcredist2010\tools\*.*
C:\ProgramData\chocolatey\lib-bad\vcredist2012\*.*
C:\ProgramData\chocolatey\lib-bad\vcredist2012\tools\*.*
C:\ProgramData\chocolatey\lib-bad\vcredist2013\*.*
C:\ProgramData\chocolatey\lib-bad\vcredist2013\tools\*.*
C:\ProgramData\chocolatey\logs\*.*
C:\ProgramData\chocolatey\redirects\*.*
C:\ProgramData\chocolatey\redirects\choco.exe
C:\ProgramData\chocolatey\redirects
C:\ProgramData\chocolatey\redirects\chocolatey.exe
C:\ProgramData\chocolatey\redirects\cinst.exe
C:\ProgramData\chocolatey\redirects\clist.exe
C:\ProgramData\chocolatey\redirects\cpack.exe
C:\ProgramData\chocolatey\redirects\cpush.exe
C:\ProgramData\chocolatey\redirects\cuninst.exe
C:\ProgramData\chocolatey\redirects\cup.exe
C:\ProgramData\chocolatey\redirects\cver.exe
C:\ProgramData\chocolatey\tools\*.*
C:\ProgramData\chocolatey\tools\7z.exe
C:\ProgramData\chocolatey\tools\checksum.exe
C:\ProgramData\chocolatey\tools\shimgen.exe
C:\ProgramData\Desktop\*.*
C:\ProgramData\Documents\*.*
C:\ProgramData\Favorites\*.*
C:\ProgramData\Microsoft\*.*
C:\ProgramData\Microsoft\Assistance\*.*
C:\ProgramData\Microsoft\Assistance\Client\*.*
C:\ProgramData\Microsoft\Assistance\Client\1.0\*.*
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\*.*
C:\ProgramData\Microsoft\ClickToRun\*.*
C:\ProgramData\Microsoft\ClickToRun\MachineData\*.*
C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\*.*
C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\*.*
C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\*.*
C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\*.*
C:\ProgramData\Microsoft\ClickToRun\MachineData\Integration\*.*
C:\ProgramData\Microsoft\ClickToRun\MachineData\Integration\ShortcutBackups\*.*
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\*.*
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\*.*
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\en-us.16\*.*
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\x-none.16\*.*
C:\ProgramData\Microsoft\ClickToRun\UserData\*.*
C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\*.*
C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
C:\ProgramData\Microsoft
C:\ProgramData\Microsoft\ClickToRun
C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}
C:\ProgramData\Microsoft\Crypto\*.*
C:\ProgramData\Microsoft\Crypto\DSS\*.*
C:\ProgramData\Microsoft\Crypto\DSS\MachineKeys\*.*
C:\ProgramData\Microsoft\Crypto\Keys\*.*
C:\ProgramData\Microsoft\Crypto\PCPKSP\*.*
C:\ProgramData\Microsoft\Crypto\PCPKSP\WindowsAIK\*.*
C:\ProgramData\Microsoft\Crypto\RSA\*.*
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\*.*
C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\*.*
C:\ProgramData\Microsoft\Device Stage\*.*
C:\ProgramData\Microsoft\Device Stage\Device\*.*
C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\*.*
C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\*.*
C:\ProgramData\Microsoft\Device Stage\Task\*.*
C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\*.*
C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\*.*
C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\*.*
C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\*.*
C:\ProgramData\Microsoft\DeviceSync\*.*
C:\ProgramData\Microsoft\Diagnosis\*.*
C:\ProgramData\Microsoft\Diagnosis\AsimovUploader\*.*
C:\ProgramData\Microsoft\Diagnosis\DownloadedScenarios\*.*
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\*.*
C:\ProgramData\Microsoft\Diagnosis\ETLLogs\*.*
C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\*.*
C:\ProgramData\Microsoft\Diagnosis\ETLLogs\ShutdownLogger\*.*
C:\ProgramData\Microsoft\Diagnosis\LocalTraceStore\*.*
C:\ProgramData\Microsoft\Diagnosis\Sideload\*.*
C:\ProgramData\Microsoft\Diagnosis\SoftLanding\*.*
C:\ProgramData\Microsoft\Diagnosis\SoftLandingStage\*.*
C:\ProgramData\Microsoft\DRM\*.*
C:\ProgramData\Microsoft\DRM\Server\*.*
C:\ProgramData\Microsoft\eHome\*.*
C:\ProgramData\Microsoft\eHome\logs\*.*
C:\ProgramData\Microsoft\IdentityCRL\*.*
C:\ProgramData\Microsoft\Media Player\*.*
C:\ProgramData\Microsoft\MF\*.*
C:\ProgramData\Microsoft\MSDN\*.*
C:\ProgramData\Microsoft\MSDN\8.0\*.*
C:\ProgramData\Microsoft\NetFramework\*.*
C:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\*.*
C:\ProgramData\Microsoft\Network\*.*
C:\ProgramData\Microsoft\Network\Connections\*.*
C:\ProgramData\Microsoft\Network\Downloader\*.*
C:\ProgramData\Microsoft\Office\*.*
C:\ProgramData\Microsoft\Office\UICaptions\*.*
C:\ProgramData\Microsoft\Office\UICaptions\1036\*.*
C:\ProgramData\Microsoft\Office\UICaptions\3082\*.*
C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\*.*
C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\Cache\*.*
C:\ProgramData\Microsoft\PlayReady\*.*
C:\ProgramData\Microsoft\RAC\*.*
C:\ProgramData\Microsoft\RAC\Outbound\*.*
C:\ProgramData\Microsoft\RAC\PublishedData\*.*
C:\ProgramData\Microsoft\RAC\StateData\*.*
C:\ProgramData\Microsoft\RAC\Temp\*.*
C:\ProgramData\Microsoft\Search\*.*
C:\ProgramData\Microsoft\Search\Data\*.*
C:\ProgramData\Microsoft\Search\Data\Applications\*.*
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\*.*
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Config\*.*
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\*.*
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\*.*
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\*.*
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\*.*
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\*.*
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\*.*
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\*.*
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\*.*
C:\ProgramData\Microsoft\Search\Data\Temp\*.*
C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc\*.*
C:\ProgramData\Microsoft\User Account Pictures\*.*
C:\ProgramData\Microsoft\User Account Pictures\Default Pictures\*.*
C:\ProgramData\Microsoft\Vault\*.*
C:\ProgramData\Microsoft\Windows\*.*
C:\ProgramData\Microsoft\Windows\AIT\*.*
C:\ProgramData\Microsoft\Windows\Caches\*.*
C:\ProgramData\Microsoft\Windows\DeviceMetadataStore\*.*
C:\ProgramData\Microsoft\Windows\DeviceMetadataStore\en-US\*.*
C:\ProgramData\Microsoft\Windows\DRM\*.*
C:\ProgramData\Microsoft\Windows\DRM\Cache\*.*
C:\ProgramData\Microsoft\Windows\GameExplorer\*.*
C:\ProgramData\Microsoft\Windows\Power Efficiency Diagnostics\*.*
C:\ProgramData\Microsoft\Windows\Ringtones\*.*
C:\ProgramData\Microsoft\Windows\Sqm\*.*
C:\ProgramData\Microsoft\Windows\Sqm\Manifest\*.*
C:\ProgramData\Microsoft\Windows\Sqm\Sessions\*.*
C:\ProgramData\Microsoft\Windows\Sqm\Upload\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ActiveState ActivePython 2.7 (32-bit)\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Slack Technologies\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\*.*
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\*.*
C:\ProgramData\Microsoft\Windows\Templates\*.*
C:\ProgramData\Microsoft\Windows\WER\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_0x8050800c_59b74e497d838625b51ed5cf30e96b4d5cba40_07b6ab27\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_1a3ee7c081e2d247cd71cb1cec8af81b41fbf233_092e2117\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_1d1f388cdeb09e8aee2971bb8af2a5a1b222e368_09fe21d3\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_433f6d1a23154dfc2b96fefacb93237d12b6c3_093e21c3\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_68c8ee362d8fa65d65515ee8365888d37670eb_0a0a21c3\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_6c47952c19047ca42b19bf1b67331dbcffa66_05140cbf\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_6ff8e57975568c10348f6411be938465df28558f_04862127\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_6ff8e57975568c10348f6411be938465df28558f_09022127\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_761ded9a23be54735c3fef1a699e928a6e38766_099e21d3\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_761ded9a23be54735c3fef1a699e928a6e38766_0a6221c3\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_b99e79157a1e74575953fc6a5645a99bad68f236_090c0caf\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_dotnetfx35.exe_5835b518bc78d33ba96f263d586e974c60e82f4a_0f0dd2e6\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_242bbfc9a039fcc66ec857748fc5d5582f6e90_cab_0718d8db\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_35731c9d98e7f80d775921653fc6483dd292d9_cab_07b8eea5\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_366876dc8095997ce4a8ab2e79bbce796c4269_cab_07ce35ac\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_51f3253c47544caceee0a0f5368a53cb9d27755_cab_06a22476\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_5812bfcc17bee99d859824e664fb61d27b49272_cab_0be7d36d\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_7250bd5f9f4daf79aedc90a0d2553c2598bbf82c_cab_040e47bd\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_852c56fc6bc1153e46bc42ea1fd54f5e424c96a_cab_021a1236\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_c1fe98cb5a1d23921044fac21b9c959aa2297ac8_cab_06288f4f\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_cddaf8f327689bfd665492d5aa42d5d8da17cef5_cab_0ab00f5c\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_00000000_9f1bd742172d8f3dcb32404febc4939090d1a3_cab_0a7b56c7\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_0x8050800c_59b74e497d838625b51ed5cf30e96b4d5cba40_cab_05f090d2\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_14dfdca64572739510eafd644c8741eb6ffbb1e7_cab_0977b9f7\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_18e0cdd3d9d140bd4b7872963663ccfc3aa5b6c_cab_07cbb246\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_1c7dd4a8e5a6885c0651cfbb2869faa29be575_cab_09a7b14c\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_395cb55f151370e6b88abdc69a876ba0ccd21d74_cab_0ac3bb20\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_4312ecd48e952818eaa5259ba6a8e5d2756d231_cab_05fbbd52\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_4693a8cb2b91e96240f0792bbb4e45df35e8cc_cab_05abbab2\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_47d2b02a27cbd803f2a2547d6f22172933955e_cab_0afbb37f\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_4886ed60c5bdecb1a2113dce5d8dd0d53799a1ed_cab_0b43ba74\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_4e8516982dc8dbb9414cd941a27fa19d43f3_cab_0a97b38e\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_539072add0a614acccc81a5195e26ae66632ac0_cab_05e3b40b\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_55c54d22996b12f0c67d1ecabb970ccead380df_cab_08e3bce5\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_7ac9473aecfa15f9a072893e72a944a9bb2af498_cab_00fbb3ec\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_81194f3f20e0365757cfb5ffbeafdaca6e2e7425_cab_0a9bb5b1\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_87ab3e9ba6c9e7f2c93c69654b1a92a9cb1a412_cab_091fb515\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_87db6d249a278b52ba6c78ab4a49a55f2e5ffd_cab_0587bbdb\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_8d3e342c98bec82317dd428f577824ab242df1_cab_093fb0fe\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_934abf485f7e6586297978644f974aaeccf4355e_cab_02d3b062\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_99caf60f27b2e641edf3866d855e6d7275eedd2_cab_097fbcf5\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_a28d11f44d762e54ba392aa95b7b327171f3a0ee_cab_09bfb294\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_aa6bf7d6cc8dcd8a93744cb6d52c7fe704dafc9_cab_0bf3b890\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_aedd02de2be847d5477a5ee2e26371c0967535_cab_0b13b19a\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_b724d09d1975813a91f84b161b3a232691448aa_cab_0703b7a5\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_c2eb64172e82d444b15de7fcbe86244ee5c57_cab_04a3bd91\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_c5609050ab732f36b6b318a47b1ffa762e2a310_cab_0283b6ea\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_d444a0c62d433a0d1444a6b3d7260faa18dd58d_cab_0be7bb5e\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_d44b01b3dab538ec366335d9cf7da34a1bd725_cab_0987bc87\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_d885ea0e135c380acfab0bbec585aea78266b5f_cab_09b7bc29\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_de0f68950a1fcd4bd30fe5edb41c12ca0825b75_cab_032fb4f6\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_e3967cff4e8ed0ea1c1d68bd421b36552d737039_cab_0bb3b796\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_ed3eed937a5190e84267e719ca21a1215504959_cab_035bb5ff\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_ee7985e3f2b08d426cf3f7f1e5933973f4a84b7_cab_08bfb0cf\*.*
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7601.24085_3c5367bb954e8f152085e386c47ebbf84f342e19_cab_08fe1e58\*.*
C:\ProgramData\Microsoft\Windows Defender\*.*
C:\ProgramData\Microsoft\Windows Defender\Definition Updates\*.*
C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\*.*
C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates\*.*
C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\*.*
C:\ProgramData\Microsoft\Windows Defender\LocalCopy\*.*
C:\ProgramData\Microsoft\Windows Defender\Quarantine\*.*
C:\ProgramData\Microsoft\Windows Defender\Scans\*.*
C:\ProgramData\Microsoft\Windows Defender\Scans\History\*.*
C:\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager\*.*
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\*.*
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\*.*
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service\*.*
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Store\*.*
C:\ProgramData\Microsoft\Windows Defender\Support\*.*
C:\ProgramData\Microsoft\Windows NT\*.*
C:\ProgramData\Microsoft\Windows NT\MSFax\*.*
C:\ProgramData\Microsoft\Windows NT\MSFax\ActivityLog\*.*
C:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages\*.*
C:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages\en-US\*.*
C:\ProgramData\Microsoft\Windows NT\MSFax\Inbox\*.*
C:\ProgramData\Microsoft\Windows NT\MSFax\Queue\*.*
C:\ProgramData\Microsoft\Windows NT\MSFax\SentItems\*.*
C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\*.*
C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\en-US\*.*
C:\ProgramData\Microsoft\Windows NT\MSScan\*.*
C:\ProgramData\Microsoft\WwanSvc\*.*
C:\ProgramData\Microsoft\WwanSvc\Profiles\*.*
C:\ProgramData\Microsoft Help\*.*
C:\ProgramData\Microsoft OneDrive\*.*
C:\ProgramData\Microsoft OneDrive\setup\*.*
C:\ProgramData\Microsoft Toolkit\*.*
C:\ProgramData\Mozilla\*.*
C:\ProgramData\Mozilla\logs\*.*
C:\ProgramData\Mozilla\updates\*.*
C:\ProgramData\Mozilla\updates\E7CF176E110C211B\*.*
C:\ProgramData\Package Cache\*.*
C:\ProgramData\Package Cache\{AF12A465-EA47-447D-B6BF-2A82CDBE2F0E}v3.8.6994.0\*.*
C:\ProgramData\regid.1991-06.com.microsoft\*.*
C:\ProgramData\shimgen\*.*
C:\ProgramData\shimgen\generatedfiles\*.*
C:\ProgramData\Start Menu\*.*
C:\ProgramData\Sun\*.*
C:\ProgramData\Sun\Java\*.*
C:\ProgramData\Sun\Java\Java Update\*.*
C:\ProgramData\Templates\*.*
C:\Python27\*.*
C:\Python27\DLLs\*.*
C:\Python27\Doc\*.*
C:\Python27\include\*.*
C:\Python27\Lib\*.*
C:\Python27\Lib\compiler\*.*
C:\Python27\Lib\ctypes\*.*
C:\Python27\Lib\ctypes\macholib\*.*
C:\Python27\Lib\ctypes\test\*.*
C:\Python27\Lib\curses\*.*
C:\Python27\Lib\distutils\*.*
C:\Python27\Lib\distutils\command\*.*
C:\Python27\Lib\distutils\command\wininst-6.0.exe
C:\Python27\Lib\distutils
C:\Python27\Lib\distutils\command\wininst-7.1.exe
C:\Python27\Lib\distutils\command\wininst-8.0.exe
C:\Python27\Lib\distutils\command\wininst-9.0-amd64.exe
C:\Python27\Lib\distutils\command\wininst-9.0.exe
C:\Python27\Lib\distutils\tests\*.*
C:\Python27\Lib\email\*.*
C:\Python27\Lib\email\mime\*.*
C:\Python27\Lib\email\test\*.*
C:\Python27\Lib\email\test\data\*.*
C:\Python27\Lib\encodings\*.*
C:\Python27\Lib\ensurepip\*.*
C:\Python27\Lib\ensurepip\_bundled\*.*
C:\Python27\Lib\hotshot\*.*
C:\Python27\Lib\idlelib\*.*
C:\Python27\Lib\idlelib\Icons\*.*
C:\Python27\Lib\idlelib\idle_test\*.*
C:\Python27\Lib\importlib\*.*
C:\Python27\Lib\json\*.*
C:\Python27\Lib\json\tests\*.*
C:\Python27\Lib\lib-tk\*.*
C:\Python27\Lib\lib-tk\test\*.*
C:\Python27\Lib\lib-tk\test\test_tkinter\*.*
C:\Python27\Lib\lib-tk\test\test_ttk\*.*
C:\Python27\Lib\lib2to3\*.*
C:\Python27\Lib\lib2to3\fixes\*.*
C:\Python27\Lib\lib2to3\pgen2\*.*
C:\Python27\Lib\lib2to3\tests\*.*
C:\Python27\Lib\lib2to3\tests\data\*.*
C:\Python27\Lib\lib2to3\tests\data\fixers\*.*
C:\Python27\Lib\lib2to3\tests\data\fixers\myfixes\*.*
C:\Python27\Lib\logging\*.*
C:\Python27\Lib\msilib\*.*
C:\Python27\Lib\multiprocessing\*.*
C:\Python27\Lib\multiprocessing\dummy\*.*
C:\Python27\Lib\pydoc_data\*.*
C:\Python27\Lib\site-packages\*.*
C:\Python27\Lib\site-packages\adodbapi\*.*
C:\Python27\Lib\site-packages\adodbapi\tests\*.*
C:\Python27\Lib\site-packages\isapi\*.*
C:\Python27\Lib\site-packages\isapi\doc\*.*
C:\Python27\Lib\site-packages\isapi\samples\*.*
C:\Python27\Lib\site-packages\isapi\test\*.*
C:\Python27\Lib\site-packages\PIL\*.*
C:\Python27\Lib\site-packages\Pillow-5.4.1-py2.7.egg-info\*.*
C:\Python27\Lib\site-packages\pip\*.*
C:\Python27\Lib\site-packages\pip\backwardcompat\*.*
C:\Python27\Lib\site-packages\pip\commands\*.*
C:\Python27\Lib\site-packages\pip\vcs\*.*
C:\Python27\Lib\site-packages\pip\_vendor\*.*
C:\Python27\Lib\site-packages\pip\_vendor\colorama\*.*
C:\Python27\Lib\site-packages\pip\_vendor\distlib\*.*
C:\Python27\Lib\site-packages\pip\_vendor\distlib\t32.exe
C:\Python27\Lib\site-packages
C:\Python27\Lib\site-packages\pip\_vendor\distlib\t64.exe
C:\Python27\Lib\site-packages\pip\_vendor\distlib\w32.exe
C:\Python27\Lib\site-packages\pip\_vendor\distlib\w64.exe
C:\Python27\Lib\site-packages\pip\_vendor\distlib\_backport\*.*
C:\Python27\Lib\site-packages\pip\_vendor\html5lib\*.*
C:\Python27\Lib\site-packages\pip\_vendor\html5lib\filters\*.*
C:\Python27\Lib\site-packages\pip\_vendor\html5lib\serializer\*.*
C:\Python27\Lib\site-packages\pip\_vendor\html5lib\treeadapters\*.*
C:\Python27\Lib\site-packages\pip\_vendor\html5lib\treebuilders\*.*
C:\Python27\Lib\site-packages\pip\_vendor\html5lib\treewalkers\*.*
C:\Python27\Lib\site-packages\pip\_vendor\html5lib\trie\*.*
C:\Python27\Lib\site-packages\pip\_vendor\requests\*.*
C:\Python27\Lib\site-packages\pip\_vendor\requests\packages\*.*
C:\Python27\Lib\site-packages\pip\_vendor\requests\packages\chardet\*.*
C:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\*.*
C:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\contrib\*.*
C:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\packages\*.*
C:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\packages\ssl_match_hostname\*.*
C:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\util\*.*
C:\Python27\Lib\site-packages\pip\_vendor\_markerlib\*.*
C:\Python27\Lib\site-packages\pip-1.5.6-py2.7.egg-info\*.*
C:\Python27\Lib\site-packages\pypm\*.*
C:\Python27\Lib\site-packages\pypm\client\*.*
C:\Python27\Lib\site-packages\pypm\common\*.*
C:\Python27\Lib\site-packages\pypm\external\*.*
C:\Python27\Lib\site-packages\pypm\external\2\*.*
C:\Python27\Lib\site-packages\pypm\external\2\sqlalchemy\*.*
C:\Python27\Lib\site-packages\pypm\external\2\sqlalchemy\connectors\*.*
C:\Python27\Lib\site-packages\pypm\external\2\sqlalchemy\databases\*.*
C:\Python27\Lib\site-packages\pypm\external\2\sqlalchemy\dialects\*.*
C:\Python27\Lib\site-packages\pypm\external\2\sqlalchemy\dialects\sqlite\*.*
C:\Python27\Lib\site-packages\pypm\external\2\sqlalchemy\engine\*.*
C:\Python27\Lib\site-packages\pypm\external\2\sqlalchemy\ext\*.*
C:\Python27\Lib\site-packages\pypm\external\2\sqlalchemy\orm\*.*
C:\Python27\Lib\site-packages\pypm\external\2\sqlalchemy\sql\*.*
C:\Python27\Lib\site-packages\pypm\external\2\sqlalchemy_nose\*.*
C:\Python27\Lib\site-packages\pypm\external\applib\*.*
C:\Python27\Lib\site-packages\pypm-1.4.3-py2.7.egg-info\*.*
C:\Python27\Lib\site-packages\pythonselect\*.*
C:\Python27\Lib\site-packages\pythonselect-1.3-py2.7.egg-info\*.*
C:\Python27\Lib\site-packages\pythonwin\*.*
C:\Python27\Lib\site-packages\pythonwin\Pythonwin.exe
C:\Python27\Lib\site-packages\pythonwin
C:\Python27\Lib\site-packages\pythonwin\pywin\*.*
C:\Python27\Lib\site-packages\pythonwin\pywin\debugger\*.*
C:\Python27\Lib\site-packages\pythonwin\pywin\Demos\*.*
C:\Python27\Lib\site-packages\pythonwin\pywin\Demos\app\*.*
C:\Python27\Lib\site-packages\pythonwin\pywin\Demos\ocx\*.*
C:\Python27\Lib\site-packages\pythonwin\pywin\dialogs\*.*
C:\Python27\Lib\site-packages\pythonwin\pywin\docking\*.*
C:\Python27\Lib\site-packages\pythonwin\pywin\framework\*.*
C:\Python27\Lib\site-packages\pythonwin\pywin\framework\editor\*.*
C:\Python27\Lib\site-packages\pythonwin\pywin\framework\editor\color\*.*
C:\Python27\Lib\site-packages\pythonwin\pywin\idle\*.*
C:\Python27\Lib\site-packages\pythonwin\pywin\mfc\*.*
C:\Python27\Lib\site-packages\pythonwin\pywin\scintilla\*.*
C:\Python27\Lib\site-packages\pythonwin\pywin\tools\*.*
C:\Python27\Lib\site-packages\setuptools\*.*
C:\Python27\Lib\site-packages\setuptools\cli-32.exe
C:\Python27\Lib\site-packages\setuptools
C:\Python27\Lib\site-packages\setuptools\cli-64.exe
C:\Python27\Lib\site-packages\setuptools\cli-arm-32.exe
C:\Python27\Lib\site-packages\setuptools\cli.exe
C:\Python27\Lib\site-packages\setuptools\command\*.*
C:\Python27\Lib\site-packages\setuptools\gui-32.exe
C:\Python27\Lib\site-packages\setuptools\gui-64.exe
C:\Python27\Lib\site-packages\setuptools\gui-arm-32.exe
C:\Python27\Lib\site-packages\setuptools\gui.exe
C:\Python27\Lib\site-packages\setuptools\tests\*.*
C:\Python27\Lib\site-packages\setuptools-5.2-py2.7.egg-info\*.*
C:\Python27\Lib\site-packages\virtualenv-1.11.6-py2.7.egg-info\*.*
C:\Python27\Lib\site-packages\virtualenv_support\*.*
C:\Python27\Lib\site-packages\win32\*.*
C:\Python27\Lib\site-packages\win32\Demos\*.*
C:\Python27\Lib\site-packages\win32\Demos\c_extension\*.*
C:\Python27\Lib\site-packages\win32\Demos\dde\*.*
C:\Python27\Lib\site-packages\win32\Demos\images\*.*
C:\Python27\Lib\site-packages\win32\Demos\pipes\*.*
C:\Python27\Lib\site-packages\win32\Demos\security\*.*
C:\Python27\Lib\site-packages\win32\Demos\security\sspi\*.*
C:\Python27\Lib\site-packages\win32\Demos\service\*.*
C:\Python27\Lib\site-packages\win32\Demos\win32wnet\*.*
C:\Python27\Lib\site-packages\win32\include\*.*
C:\Python27\Lib\site-packages\win32\lib\*.*
C:\Python27\Lib\site-packages\win32\libs\*.*
C:\Python27\Lib\site-packages\win32\pythonservice.exe
C:\Python27\Lib\site-packages\win32\scripts\*.*
C:\Python27\Lib\site-packages\win32\scripts\ce\*.*
C:\Python27\Lib\site-packages\win32\scripts\VersionStamp\*.*
C:\Python27\Lib\site-packages\win32\test\*.*
C:\Python27\Lib\site-packages\win32\test\win32rcparser\*.*
C:\Python27\Lib\site-packages\win32com\*.*
C:\Python27\Lib\site-packages\win32com\client\*.*
C:\Python27\Lib\site-packages\win32com\demos\*.*
C:\Python27\Lib\site-packages\win32com\include\*.*
C:\Python27\Lib\site-packages\win32com\libs\*.*
C:\Python27\Lib\site-packages\win32com\makegw\*.*
C:\Python27\Lib\site-packages\win32com\server\*.*
C:\Python27\Lib\site-packages\win32com\servers\*.*
C:\Python27\Lib\site-packages\win32com\test\*.*
C:\Python27\Lib\site-packages\win32comext\*.*
C:\Python27\Lib\site-packages\win32comext\adsi\*.*
C:\Python27\Lib\site-packages\win32comext\adsi\demos\*.*
C:\Python27\Lib\site-packages\win32comext\authorization\*.*
C:\Python27\Lib\site-packages\win32comext\authorization\demos\*.*
C:\Python27\Lib\site-packages\win32comext\axcontrol\*.*
C:\Python27\Lib\site-packages\win32comext\axdebug\*.*
C:\Python27\Lib\site-packages\win32comext\axscript\*.*
C:\Python27\Lib\site-packages\win32comext\axscript\client\*.*
C:\Python27\Lib\site-packages\win32comext\axscript\Demos\*.*
C:\Python27\Lib\site-packages\win32comext\axscript\Demos\client\*.*
C:\Python27\Lib\site-packages\win32comext\axscript\Demos\client\asp\*.*
C:\Python27\Lib\site-packages\win32comext\axscript\Demos\client\asp\interrupt\*.*
C:\Python27\Lib\site-packages\win32comext\axscript\Demos\client\ie\*.*
C:\Python27\Lib\site-packages\win32comext\axscript\Demos\client\wsh\*.*
C:\Python27\Lib\site-packages\win32comext\axscript\server\*.*
C:\Python27\Lib\site-packages\win32comext\axscript\test\*.*
C:\Python27\Lib\site-packages\win32comext\bits\*.*
C:\Python27\Lib\site-packages\win32comext\bits\test\*.*
C:\Python27\Lib\site-packages\win32comext\directsound\*.*
C:\Python27\Lib\site-packages\win32comext\directsound\test\*.*
C:\Python27\Lib\site-packages\win32comext\ifilter\*.*
C:\Python27\Lib\site-packages\win32comext\ifilter\demo\*.*
C:\Python27\Lib\site-packages\win32comext\internet\*.*
C:\Python27\Lib\site-packages\win32comext\mapi\*.*
C:\Python27\Lib\site-packages\win32comext\mapi\demos\*.*
C:\Python27\Lib\site-packages\win32comext\propsys\*.*
C:\Python27\Lib\site-packages\win32comext\propsys\test\*.*
C:\Python27\Lib\site-packages\win32comext\shell\*.*
C:\Python27\Lib\site-packages\win32comext\shell\demos\*.*
C:\Python27\Lib\site-packages\win32comext\shell\demos\servers\*.*
C:\Python27\Lib\site-packages\win32comext\shell\test\*.*
C:\Python27\Lib\site-packages\win32comext\taskscheduler\*.*
C:\Python27\Lib\site-packages\win32comext\taskscheduler\test\*.*
C:\Python27\Lib\site-packages\_markerlib\*.*
C:\Python27\Lib\sqlite3\*.*
C:\Python27\Lib\sqlite3\test\*.*
C:\Python27\Lib\test\*.*
C:\Python27\Lib\test\audiodata\*.*
C:\Python27\Lib\test\capath\*.*
C:\Python27\Lib\test\cjkencodings\*.*
C:\Python27\Lib\test\crashers\*.*
C:\Python27\Lib\test\decimaltestdata\*.*
C:\Python27\Lib\test\imghdrdata\*.*
C:\Python27\Lib\test\leakers\*.*
C:\Python27\Lib\test\subprocessdata\*.*
C:\Python27\Lib\test\tracedmodules\*.*
C:\Python27\Lib\test\xmltestdata\*.*
C:\Python27\Lib\unittest\*.*
C:\Python27\Lib\unittest\test\*.*
C:\Python27\Lib\wsgiref\*.*
C:\Python27\Lib\xml\*.*
C:\Python27\Lib\xml\dom\*.*
C:\Python27\Lib\xml\etree\*.*
C:\Python27\Lib\xml\parsers\*.*
C:\Python27\Lib\xml\sax\*.*
C:\Python27\libs\*.*
C:\Python27\python.exe
C:\Python27\python2.7.exe
C:\Python27\python2.exe
C:\Python27\pythonw.exe
C:\Python27\pythonw2.7.exe
C:\Python27\pythonw2.exe
C:\Python27\RemovePillow.exe
C:\Python27\Scripts\*.*
C:\Python27\Scripts\easy_install-2.7.exe
C:\Python27\Scripts\easy_install.exe
C:\Python27\Scripts\pip.exe
C:\Python27\Scripts\pip2.7.exe
C:\Python27\Scripts\pip2.exe
C:\Python27\Scripts\pypm-2.7.exe
C:\Python27\Scripts\pypm.exe
C:\Python27\Scripts\pysel.exe
C:\Python27\Scripts\virtualenv-2.7.exe
C:\Python27\Scripts\virtualenv.exe
C:\Python27\tcl\*.*
C:\Python27\tcl\dde1.3\*.*
C:\Python27\tcl\include\*.*
C:\Python27\tcl\include\X11\*.*
C:\Python27\tcl\reg1.2\*.*
C:\Python27\tcl\tcl8\*.*
C:\Python27\tcl\tcl8\8.4\*.*
C:\Python27\tcl\tcl8\8.4\platform\*.*
C:\Python27\tcl\tcl8\8.5\*.*
C:\Python27\tcl\tcl8.5\*.*
C:\Python27\tcl\tcl8.5\encoding\*.*
C:\Python27\tcl\tcl8.5\http1.0\*.*
C:\Python27\tcl\tcl8.5\msgs\*.*
C:\Python27\tcl\tcl8.5\opt0.4\*.*
C:\Python27\tcl\tcl8.5\tzdata\*.*
C:\Python27\tcl\tcl8.5\tzdata\Africa\*.*
C:\Python27\tcl\tcl8.5\tzdata\America\*.*
C:\Python27\tcl\tcl8.5\tzdata\America\Argentina\*.*
C:\Python27\tcl\tcl8.5\tzdata\America\Indiana\*.*
C:\Python27\tcl\tcl8.5\tzdata\America\Kentucky\*.*
C:\Python27\tcl\tcl8.5\tzdata\America\North_Dakota\*.*
C:\Python27\tcl\tcl8.5\tzdata\Antarctica\*.*
C:\Python27\tcl\tcl8.5\tzdata\Arctic\*.*
C:\Python27\tcl\tcl8.5\tzdata\Asia\*.*
C:\Python27\tcl\tcl8.5\tzdata\Atlantic\*.*
C:\Python27\tcl\tcl8.5\tzdata\Australia\*.*
C:\Python27\tcl\tcl8.5\tzdata\Brazil\*.*
C:\Python27\tcl\tcl8.5\tzdata\Canada\*.*
C:\Python27\tcl\tcl8.5\tzdata\Chile\*.*
C:\Python27\tcl\tcl8.5\tzdata\Etc\*.*
C:\Python27\tcl\tcl8.5\tzdata\Europe\*.*
C:\Python27\tcl\tcl8.5\tzdata\Indian\*.*
C:\Python27\tcl\tcl8.5\tzdata\Mexico\*.*
C:\Python27\tcl\tcl8.5\tzdata\Pacific\*.*
C:\Python27\tcl\tcl8.5\tzdata\SystemV\*.*
C:\Python27\tcl\tcl8.5\tzdata\US\*.*
C:\Python27\tcl\Tix8.4.3\*.*
C:\Python27\tcl\Tix8.4.3\bitmaps\*.*
C:\Python27\tcl\Tix8.4.3\pref\*.*
C:\Python27\tcl\tk8.5\*.*
C:\Python27\tcl\tk8.5\demos\*.*
C:\Python27\tcl\tk8.5\demos\images\*.*
C:\Python27\tcl\tk8.5\images\*.*
C:\Python27\tcl\tk8.5\msgs\*.*
C:\Python27\tcl\tk8.5\ttk\*.*
C:\Python27\Tools\*.*
C:\Python27\Tools\asinstall\*.*
C:\Python27\Tools\i18n\*.*
C:\Python27\Tools\pynche\*.*
C:\Python27\Tools\pynche\X\*.*
C:\Python27\Tools\scripts\*.*
C:\Python27\w9xpopen.exe
C:\Recovery\*.*
C:\Recovery\642c8126-2730-11e9-98eb-95b8b07d25b7\*.*
C:\System Volume Information\*.*
C:\Users\*.*
C:\Users\All Users\*.*
C:\Users\All Users\Adobe\*.*
C:\Users\All Users\Adobe\Acrobat\*.*
C:\Users\All Users\Adobe\Acrobat\11.0\*.*
C:\Users\All Users\Adobe\Acrobat\11.0\Replicate\*.*
C:\Users\All Users\Adobe\Acrobat\11.0\Replicate\Security\*.*
C:\Users\All Users\Adobe\Setup\*.*
C:\Users\All Users\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-AB0000000001}\*.*
C:\Users\All Users\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-AB0000000001}\setup.exe
C:\Users\All Users
C:\Users\All Users\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-AB0000000001}
C:\Users\All Users\Application Data\*.*
C:\Users\All Users\chocolatey\*.*
C:\Users\All Users\chocolatey\.chocolatey\*.*
C:\Users\All Users\chocolatey\.chocolatey\7zip.install.18.6\*.*
C:\Users\All Users\chocolatey\.chocolatey\ccenhancer.4.5.1\*.*
C:\Users\All Users\chocolatey\.chocolatey\ccleaner.5.52.6967\*.*
C:\Users\All Users\chocolatey\.chocolatey\chocolatey-core.extension.1.3.3\*.*
C:\Users\All Users\chocolatey\.chocolatey\chocolatey-windowsupdate.extension.1.0.3\*.*
C:\Users\All Users\chocolatey\.chocolatey\dotnet4.7.2.4.7.2.20180712\*.*
C:\Users\All Users\chocolatey\.chocolatey\dotnetfx.4.7.2.20180712\*.*
C:\Users\All Users\chocolatey\.chocolatey\filezilla.3.40.0\*.*
C:\Users\All Users\chocolatey\.chocolatey\gimp.2.10.8\*.*
C:\Users\All Users\chocolatey\.chocolatey\IrfanView.4.52\*.*
C:\Users\All Users\chocolatey\.chocolatey\KB2919355.1.0.20160915\*.*
C:\Users\All Users\chocolatey\.chocolatey\KB2919442.1.0.20160915\*.*
C:\Users\All Users\chocolatey\.chocolatey\KB2999226.1.0.20181019\*.*
C:\Users\All Users\chocolatey\.chocolatey\KB3033929.1.0.4\*.*
C:\Users\All Users\chocolatey\.chocolatey\KB3035131.1.0.2\*.*
C:\Users\All Users\chocolatey\.chocolatey\notepadplusplus.install.7.6.3\*.*
C:\Users\All Users\chocolatey\.chocolatey\pidgin.2.13.0\*.*
C:\Users\All Users\chocolatey\.chocolatey\skype.8.38.0.138\*.*
C:\Users\All Users\chocolatey\.chocolatey\slack.3.3.7\*.*
C:\Users\All Users\chocolatey\.chocolatey\speccy.1.32.740\*.*
C:\Users\All Users\chocolatey\.chocolatey\spotify.1.0.80.474\*.*
C:\Users\All Users\chocolatey\.chocolatey\thunderbird.60.5.0\*.*
C:\Users\All Users\chocolatey\.chocolatey\vcredist-all.1.0.0\*.*
C:\Users\All Users\chocolatey\.chocolatey\vcredist140.14.16.27024.1\*.*
C:\Users\All Users\chocolatey\.chocolatey\vcredist2005.8.1.0.20160118\*.*
C:\Users\All Users\chocolatey\.chocolatey\vcredist2008.9.0.30729.6161\*.*
C:\Users\All Users\chocolatey\.chocolatey\vcredist2010.10.0.40219.2\*.*
C:\Users\All Users\chocolatey\.chocolatey\vcredist2012.11.0.61031\*.*
C:\Users\All Users\chocolatey\.chocolatey\vcredist2013.12.0.40660.20180427\*.*
C:\Users\All Users\chocolatey\.chocolatey\vcredist2015.14.0.24215.20170201\*.*
C:\Users\All Users\chocolatey\.chocolatey\vcredist2017.14.16.27024.1\*.*
C:\Users\All Users\chocolatey\.chocolatey\vlc.3.0.6\*.*
C:\Users\All Users\chocolatey\.chocolatey\winrar.5.61\*.*
C:\Users\All Users\chocolatey\bin\*.*
C:\Users\All Users\chocolatey\bin\7z.exe
C:\Users\All Users\chocolatey
C:\Users\All Users\chocolatey\bin\choco.exe
C:\Users\All Users\chocolatey\bin\chocolatey.exe
C:\Users\All Users\chocolatey\bin\cinst.exe
C:\Users\All Users\chocolatey\bin\clist.exe
C:\Users\All Users\chocolatey\bin\cpack.exe
C:\Users\All Users\chocolatey\bin\cpush.exe
C:\Users\All Users\chocolatey\bin\cuninst.exe
C:\Users\All Users\chocolatey\bin\cup.exe
C:\Users\All Users\chocolatey\bin\cver.exe
C:\Users\All Users\chocolatey\bin\notepad++.exe
C:\Users\All Users\chocolatey\choco.exe
C:\Users\All Users\chocolatey\config\*.*
C:\Users\All Users\chocolatey\extensions\*.*
C:\Users\All Users\chocolatey\extensions\chocolatey-core\*.*
C:\Users\All Users\chocolatey\extensions\chocolatey-windowsupdate\*.*
C:\Users\All Users\chocolatey\helpers\*.*
C:\Users\All Users\chocolatey\helpers\functions\*.*
C:\Users\All Users\chocolatey\lib\*.*
C:\Users\All Users\chocolatey\lib\7zip.install\*.*
C:\Users\All Users\chocolatey\lib\7zip.install\legal\*.*
C:\Users\All Users\chocolatey\lib\7zip.install\tools\*.*
C:\Users\All Users\chocolatey\lib\ccleaner\*.*
C:\Users\All Users\chocolatey\lib\ccleaner\tools\*.*
C:\Users\All Users\chocolatey\lib\chocolatey\*.*
C:\Users\All Users\chocolatey\lib\chocolatey-core.extension\*.*
C:\Users\All Users\chocolatey\lib\chocolatey-core.extension\extensions\*.*
C:\Users\All Users\chocolatey\lib\chocolatey-windowsupdate.extension\*.*
C:\Users\All Users\chocolatey\lib\chocolatey-windowsupdate.extension\extensions\*.*
C:\Users\All Users\chocolatey\lib\dotnet4.7.2\*.*
C:\Users\All Users\chocolatey\lib\dotnetfx\*.*
C:\Users\All Users\chocolatey\lib\dotnetfx\tools\*.*
C:\Users\All Users\chocolatey\lib\filezilla\*.*
C:\Users\All Users\chocolatey\lib\filezilla\legal\*.*
C:\Users\All Users\chocolatey\lib\filezilla\tools\*.*
C:\Users\All Users\chocolatey\lib\gimp\*.*
C:\Users\All Users\chocolatey\lib\gimp\legal\*.*
C:\Users\All Users\chocolatey\lib\gimp\tools\*.*
C:\Users\All Users\chocolatey\lib\IrfanView\*.*
C:\Users\All Users\chocolatey\lib\IrfanView\tools\*.*
C:\Users\All Users\chocolatey\lib\KB2919355\*.*
C:\Users\All Users\chocolatey\lib\KB2919355\tools\*.*
C:\Users\All Users\chocolatey\lib\KB2919442\*.*
C:\Users\All Users\chocolatey\lib\KB2919442\tools\*.*
C:\Users\All Users\chocolatey\lib\notepadplusplus.install\*.*
C:\Users\All Users\chocolatey\lib\notepadplusplus.install\legal\*.*
C:\Users\All Users\chocolatey\lib\notepadplusplus.install\tools\*.*
C:\Users\All Users\chocolatey\lib\skype\*.*
C:\Users\All Users\chocolatey\lib\skype\tools\*.*
C:\Users\All Users\chocolatey\lib\slack\*.*
C:\Users\All Users\chocolatey\lib\slack\tools\*.*
C:\Users\All Users\chocolatey\lib\speccy\*.*
C:\Users\All Users\chocolatey\lib\speccy\tools\*.*
C:\Users\All Users\chocolatey\lib\thunderbird\*.*
C:\Users\All Users\chocolatey\lib\thunderbird\tools\*.*
C:\Users\All Users\chocolatey\lib\vcredist-all\*.*
C:\Users\All Users\chocolatey\lib\vcredist2005\*.*
C:\Users\All Users\chocolatey\lib\vcredist2005\tools\*.*
C:\Users\All Users\chocolatey\lib\vcredist2015\*.*
C:\Users\All Users\chocolatey\lib\vcredist2017\*.*
C:\Users\All Users\chocolatey\lib\vlc\*.*
C:\Users\All Users\chocolatey\lib\vlc\legal\*.*
C:\Users\All Users\chocolatey\lib\vlc\tools\*.*
C:\Users\All Users\chocolatey\lib\winrar\*.*
C:\Users\All Users\chocolatey\lib\winrar\tools\*.*
C:\Users\All Users\chocolatey\lib-bad\*.*
C:\Users\All Users\chocolatey\lib-bad\ccenhancer\*.*
C:\Users\All Users\chocolatey\lib-bad\ccenhancer\tools\*.*
C:\Users\All Users\chocolatey\lib-bad\KB2999226\*.*
C:\Users\All Users\chocolatey\lib-bad\KB2999226\tools\*.*
C:\Users\All Users\chocolatey\lib-bad\KB3033929\*.*
C:\Users\All Users\chocolatey\lib-bad\KB3033929\Tools\*.*
C:\Users\All Users\chocolatey\lib-bad\KB3035131\*.*
C:\Users\All Users\chocolatey\lib-bad\KB3035131\Tools\*.*
C:\Users\All Users\chocolatey\lib-bad\pidgin\*.*
C:\Users\All Users\chocolatey\lib-bad\pidgin\tools\*.*
C:\Users\All Users\chocolatey\lib-bad\spotify\*.*
C:\Users\All Users\chocolatey\lib-bad\spotify\tools\*.*
C:\Users\All Users\chocolatey\lib-bad\vcredist140\*.*
C:\Users\All Users\chocolatey\lib-bad\vcredist140\tools\*.*
C:\Users\All Users\chocolatey\lib-bad\vcredist2008\*.*
C:\Users\All Users\chocolatey\lib-bad\vcredist2008\tools\*.*
C:\Users\All Users\chocolatey\lib-bad\vcredist2010\*.*
C:\Users\All Users\chocolatey\lib-bad\vcredist2010\tools\*.*
C:\Users\All Users\chocolatey\lib-bad\vcredist2012\*.*
C:\Users\All Users\chocolatey\lib-bad\vcredist2012\tools\*.*
C:\Users\All Users\chocolatey\lib-bad\vcredist2013\*.*
C:\Users\All Users\chocolatey\lib-bad\vcredist2013\tools\*.*
C:\Users\All Users\chocolatey\logs\*.*
C:\Users\All Users\chocolatey\redirects\*.*
C:\Users\All Users\chocolatey\redirects\choco.exe
C:\Users\All Users\chocolatey\redirects
C:\Users\All Users\chocolatey\redirects\chocolatey.exe
C:\Users\All Users\chocolatey\redirects\cinst.exe
C:\Users\All Users\chocolatey\redirects\clist.exe
C:\Users\All Users\chocolatey\redirects\cpack.exe
C:\Users\All Users\chocolatey\redirects\cpush.exe
C:\Users\All Users\chocolatey\redirects\cuninst.exe
C:\Users\All Users\chocolatey\redirects\cup.exe
C:\Users\All Users\chocolatey\redirects\cver.exe
C:\Users\All Users\chocolatey\tools\*.*
C:\Users\All Users\chocolatey\tools\7z.exe
C:\Users\All Users\chocolatey\tools\checksum.exe
C:\Users\All Users\chocolatey\tools\shimgen.exe
C:\Users\All Users\Desktop\*.*
C:\Users\All Users\Documents\*.*
C:\Users\All Users\Favorites\*.*
C:\Users\All Users\Microsoft\*.*
C:\Users\All Users\Microsoft\Assistance\*.*
C:\Users\All Users\Microsoft\Assistance\Client\*.*
C:\Users\All Users\Microsoft\Assistance\Client\1.0\*.*
C:\Users\All Users\Microsoft\Assistance\Client\1.0\en-US\*.*
C:\Users\All Users\Microsoft\ClickToRun\*.*
C:\Users\All Users\Microsoft\ClickToRun\MachineData\*.*
C:\Users\All Users\Microsoft\ClickToRun\MachineData\Catalog\*.*
C:\Users\All Users\Microsoft\ClickToRun\MachineData\Catalog\Packages\*.*
C:\Users\All Users\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\*.*
C:\Users\All Users\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\*.*
C:\Users\All Users\Microsoft\ClickToRun\MachineData\Integration\*.*
C:\Users\All Users\Microsoft\ClickToRun\MachineData\Integration\ShortcutBackups\*.*
C:\Users\All Users\Microsoft\ClickToRun\ProductReleases\*.*
C:\Users\All Users\Microsoft\ClickToRun\ProductReleases\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\*.*
C:\Users\All Users\Microsoft\ClickToRun\ProductReleases\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\en-us.16\*.*
C:\Users\All Users\Microsoft\ClickToRun\ProductReleases\01C9D684-31E9-4CB0-B96D-5E7D370F9D4C\x-none.16\*.*
C:\Users\All Users\Microsoft\ClickToRun\UserData\*.*
C:\Users\All Users\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\*.*
C:\Users\All Users\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
C:\Users\All Users\Microsoft
C:\Users\All Users\Microsoft\ClickToRun
C:\Users\All Users\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}
C:\Users\All Users\Microsoft\Crypto\*.*
C:\Users\All Users\Microsoft\Crypto\DSS\*.*
C:\Users\All Users\Microsoft\Crypto\DSS\MachineKeys\*.*
C:\Users\All Users\Microsoft\Crypto\Keys\*.*
C:\Users\All Users\Microsoft\Crypto\PCPKSP\*.*
C:\Users\All Users\Microsoft\Crypto\PCPKSP\WindowsAIK\*.*
C:\Users\All Users\Microsoft\Crypto\RSA\*.*
C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\*.*
C:\Users\All Users\Microsoft\Crypto\RSA\S-1-5-18\*.*
C:\Users\All Users\Microsoft\Device Stage\*.*
C:\Users\All Users\Microsoft\Device Stage\Device\*.*
C:\Users\All Users\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\*.*
C:\Users\All Users\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\*.*
C:\Users\All Users\Microsoft\Device Stage\Task\*.*
C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\*.*
C:\Users\All Users\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\*.*
C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\*.*
C:\Users\All Users\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\*.*
C:\Users\All Users\Microsoft\DeviceSync\*.*
C:\Users\All Users\Microsoft\Diagnosis\*.*
C:\Users\All Users\Microsoft\Diagnosis\AsimovUploader\*.*
C:\Users\All Users\Microsoft\Diagnosis\DownloadedScenarios\*.*
C:\Users\All Users\Microsoft\Diagnosis\DownloadedSettings\*.*
C:\Users\All Users\Microsoft\Diagnosis\ETLLogs\*.*
C:\Users\All Users\Microsoft\Diagnosis\ETLLogs\AutoLogger\*.*
C:\Users\All Users\Microsoft\Diagnosis\ETLLogs\ShutdownLogger\*.*
C:\Users\All Users\Microsoft\Diagnosis\LocalTraceStore\*.*
C:\Users\All Users\Microsoft\Diagnosis\Sideload\*.*
C:\Users\All Users\Microsoft\Diagnosis\SoftLanding\*.*
C:\Users\All Users\Microsoft\Diagnosis\SoftLandingStage\*.*
C:\Users\All Users\Microsoft\DRM\*.*
C:\Users\All Users\Microsoft\DRM\Server\*.*
C:\Users\All Users\Microsoft\eHome\*.*
C:\Users\All Users\Microsoft\eHome\logs\*.*
C:\Users\All Users\Microsoft\IdentityCRL\*.*
C:\Users\All Users\Microsoft\Media Player\*.*
C:\Users\All Users\Microsoft\MF\*.*
C:\Users\All Users\Microsoft\MSDN\*.*
C:\Users\All Users\Microsoft\MSDN\8.0\*.*
C:\Users\All Users\Microsoft\NetFramework\*.*
C:\Users\All Users\Microsoft\NetFramework\BreadcrumbStore\*.*
C:\Users\All Users\Microsoft\Network\*.*
C:\Users\All Users\Microsoft\Network\Connections\*.*
C:\Users\All Users\Microsoft\Network\Downloader\*.*
C:\Users\All Users\Microsoft\Office\*.*
C:\Users\All Users\Microsoft\Office\UICaptions\*.*
C:\Users\All Users\Microsoft\Office\UICaptions\1036\*.*
C:\Users\All Users\Microsoft\Office\UICaptions\3082\*.*
C:\Users\All Users\Microsoft\OfficeSoftwareProtectionPlatform\*.*
C:\Users\All Users\Microsoft\OfficeSoftwareProtectionPlatform\Cache\*.*
C:\Users\All Users\Microsoft\PlayReady\*.*
C:\Users\All Users\Microsoft\RAC\*.*
C:\Users\All Users\Microsoft\RAC\Outbound\*.*
C:\Users\All Users\Microsoft\RAC\PublishedData\*.*
C:\Users\All Users\Microsoft\RAC\StateData\*.*
C:\Users\All Users\Microsoft\RAC\Temp\*.*
C:\Users\All Users\Microsoft\Search\*.*
C:\Users\All Users\Microsoft\Search\Data\*.*
C:\Users\All Users\Microsoft\Search\Data\Applications\*.*
C:\Users\All Users\Microsoft\Search\Data\Applications\Windows\*.*
C:\Users\All Users\Microsoft\Search\Data\Applications\Windows\Config\*.*
C:\Users\All Users\Microsoft\Search\Data\Applications\Windows\GatherLogs\*.*
C:\Users\All Users\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\*.*
C:\Users\All Users\Microsoft\Search\Data\Applications\Windows\Projects\*.*
C:\Users\All Users\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\*.*
C:\Users\All Users\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\*.*
C:\Users\All Users\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\*.*
C:\Users\All Users\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\*.*
C:\Users\All Users\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\*.*
C:\Users\All Users\Microsoft\Search\Data\Temp\*.*
C:\Users\All Users\Microsoft\Search\Data\Temp\usgthrsvc\*.*
C:\Users\All Users\Microsoft\User Account Pictures\*.*
C:\Users\All Users\Microsoft\User Account Pictures\Default Pictures\*.*
C:\Users\All Users\Microsoft\Vault\*.*
C:\Users\All Users\Microsoft\Windows\*.*
C:\Users\All Users\Microsoft\Windows\AIT\*.*
C:\Users\All Users\Microsoft\Windows\Caches\*.*
C:\Users\All Users\Microsoft\Windows\DeviceMetadataStore\*.*
C:\Users\All Users\Microsoft\Windows\DeviceMetadataStore\en-US\*.*
C:\Users\All Users\Microsoft\Windows\DRM\*.*
C:\Users\All Users\Microsoft\Windows\DRM\Cache\*.*
C:\Users\All Users\Microsoft\Windows\GameExplorer\*.*
C:\Users\All Users\Microsoft\Windows\Power Efficiency Diagnostics\*.*
C:\Users\All Users\Microsoft\Windows\Ringtones\*.*
C:\Users\All Users\Microsoft\Windows\Sqm\*.*
C:\Users\All Users\Microsoft\Windows\Sqm\Manifest\*.*
C:\Users\All Users\Microsoft\Windows\Sqm\Sessions\*.*
C:\Users\All Users\Microsoft\Windows\Sqm\Upload\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\7-Zip\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\ActiveState ActivePython 2.7 (32-bit)\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Games\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\IrfanView\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Maintenance\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Microsoft Office\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\SharePoint\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Skype\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Slack Technologies\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Speccy\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Startup\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\VideoLAN\*.*
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\WinRAR\*.*
C:\Users\All Users\Microsoft\Windows\Templates\*.*
C:\Users\All Users\Microsoft\Windows\WER\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\NonCritical_0x8050800c_59b74e497d838625b51ed5cf30e96b4d5cba40_07b6ab27\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_1a3ee7c081e2d247cd71cb1cec8af81b41fbf233_092e2117\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_1d1f388cdeb09e8aee2971bb8af2a5a1b222e368_09fe21d3\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_433f6d1a23154dfc2b96fefacb93237d12b6c3_093e21c3\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_68c8ee362d8fa65d65515ee8365888d37670eb_0a0a21c3\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_6c47952c19047ca42b19bf1b67331dbcffa66_05140cbf\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_6ff8e57975568c10348f6411be938465df28558f_04862127\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_6ff8e57975568c10348f6411be938465df28558f_09022127\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_761ded9a23be54735c3fef1a699e928a6e38766_099e21d3\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_761ded9a23be54735c3fef1a699e928a6e38766_0a6221c3\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7601.24085_b99e79157a1e74575953fc6a5645a99bad68f236_090c0caf\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\NonCritical_dotnetfx35.exe_5835b518bc78d33ba96f263d586e974c60e82f4a_0f0dd2e6\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_242bbfc9a039fcc66ec857748fc5d5582f6e90_cab_0718d8db\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_35731c9d98e7f80d775921653fc6483dd292d9_cab_07b8eea5\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_366876dc8095997ce4a8ab2e79bbce796c4269_cab_07ce35ac\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_51f3253c47544caceee0a0f5368a53cb9d27755_cab_06a22476\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_5812bfcc17bee99d859824e664fb61d27b49272_cab_0be7d36d\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_7250bd5f9f4daf79aedc90a0d2553c2598bbf82c_cab_040e47bd\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_852c56fc6bc1153e46bc42ea1fd54f5e424c96a_cab_021a1236\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_c1fe98cb5a1d23921044fac21b9c959aa2297ac8_cab_06288f4f\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\Critical_6.1.7601.17514_cddaf8f327689bfd665492d5aa42d5d8da17cef5_cab_0ab00f5c\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_00000000_9f1bd742172d8f3dcb32404febc4939090d1a3_cab_0a7b56c7\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_0x8050800c_59b74e497d838625b51ed5cf30e96b4d5cba40_cab_05f090d2\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_14dfdca64572739510eafd644c8741eb6ffbb1e7_cab_0977b9f7\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_18e0cdd3d9d140bd4b7872963663ccfc3aa5b6c_cab_07cbb246\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_1c7dd4a8e5a6885c0651cfbb2869faa29be575_cab_09a7b14c\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_395cb55f151370e6b88abdc69a876ba0ccd21d74_cab_0ac3bb20\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_4312ecd48e952818eaa5259ba6a8e5d2756d231_cab_05fbbd52\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_4693a8cb2b91e96240f0792bbb4e45df35e8cc_cab_05abbab2\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_47d2b02a27cbd803f2a2547d6f22172933955e_cab_0afbb37f\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_4886ed60c5bdecb1a2113dce5d8dd0d53799a1ed_cab_0b43ba74\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_4e8516982dc8dbb9414cd941a27fa19d43f3_cab_0a97b38e\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_539072add0a614acccc81a5195e26ae66632ac0_cab_05e3b40b\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_55c54d22996b12f0c67d1ecabb970ccead380df_cab_08e3bce5\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_7ac9473aecfa15f9a072893e72a944a9bb2af498_cab_00fbb3ec\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_81194f3f20e0365757cfb5ffbeafdaca6e2e7425_cab_0a9bb5b1\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_87ab3e9ba6c9e7f2c93c69654b1a92a9cb1a412_cab_091fb515\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_87db6d249a278b52ba6c78ab4a49a55f2e5ffd_cab_0587bbdb\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_8d3e342c98bec82317dd428f577824ab242df1_cab_093fb0fe\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_934abf485f7e6586297978644f974aaeccf4355e_cab_02d3b062\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_99caf60f27b2e641edf3866d855e6d7275eedd2_cab_097fbcf5\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_a28d11f44d762e54ba392aa95b7b327171f3a0ee_cab_09bfb294\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_aa6bf7d6cc8dcd8a93744cb6d52c7fe704dafc9_cab_0bf3b890\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_aedd02de2be847d5477a5ee2e26371c0967535_cab_0b13b19a\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_b724d09d1975813a91f84b161b3a232691448aa_cab_0703b7a5\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_c2eb64172e82d444b15de7fcbe86244ee5c57_cab_04a3bd91\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_c5609050ab732f36b6b318a47b1ffa762e2a310_cab_0283b6ea\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_d444a0c62d433a0d1444a6b3d7260faa18dd58d_cab_0be7bb5e\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_d44b01b3dab538ec366335d9cf7da34a1bd725_cab_0987bc87\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_d885ea0e135c380acfab0bbec585aea78266b5f_cab_09b7bc29\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_de0f68950a1fcd4bd30fe5edb41c12ca0825b75_cab_032fb4f6\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_e3967cff4e8ed0ea1c1d68bd421b36552d737039_cab_0bb3b796\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_ed3eed937a5190e84267e719ca21a1215504959_cab_035bb5ff\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7600.320_ee7985e3f2b08d426cf3f7f1e5933973f4a84b7_cab_08bfb0cf\*.*
C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\NonCritical_7.6.7601.24085_3c5367bb954e8f152085e386c47ebbf84f342e19_cab_08fe1e58\*.*
C:\Users\All Users\Microsoft\Windows Defender\*.*
C:\Users\All Users\Microsoft\Windows Defender\Definition Updates\*.*
C:\Users\All Users\Microsoft\Windows Defender\Definition Updates\Backup\*.*
C:\Users\All Users\Microsoft\Windows Defender\Definition Updates\Updates\*.*
C:\Users\All Users\Microsoft\Windows Defender\Definition Updates\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\*.*
C:\Users\All Users\Microsoft\Windows Defender\LocalCopy\*.*
C:\Users\All Users\Microsoft\Windows Defender\Quarantine\*.*
C:\Users\All Users\Microsoft\Windows Defender\Scans\*.*
C:\Users\All Users\Microsoft\Windows Defender\Scans\History\*.*
C:\Users\All Users\Microsoft\Windows Defender\Scans\History\CacheManager\*.*
C:\Users\All Users\Microsoft\Windows Defender\Scans\History\Results\*.*
C:\Users\All Users\Microsoft\Windows Defender\Scans\History\Results\Resource\*.*
C:\Users\All Users\Microsoft\Windows Defender\Scans\History\Service\*.*
C:\Users\All Users\Microsoft\Windows Defender\Scans\History\Store\*.*
C:\Users\All Users\Microsoft\Windows Defender\Support\*.*
C:\Users\All Users\Microsoft\Windows NT\*.*
C:\Users\All Users\Microsoft\Windows NT\MSFax\*.*
C:\Users\All Users\Microsoft\Windows NT\MSFax\ActivityLog\*.*
C:\Users\All Users\Microsoft\Windows NT\MSFax\Common Coverpages\*.*
C:\Users\All Users\Microsoft\Windows NT\MSFax\Common Coverpages\en-US\*.*
C:\Users\All Users\Microsoft\Windows NT\MSFax\Inbox\*.*
C:\Users\All Users\Microsoft\Windows NT\MSFax\Queue\*.*
C:\Users\All Users\Microsoft\Windows NT\MSFax\SentItems\*.*
C:\Users\All Users\Microsoft\Windows NT\MSFax\VirtualInbox\*.*
C:\Users\All Users\Microsoft\Windows NT\MSFax\VirtualInbox\en-US\*.*
C:\Users\All Users\Microsoft\Windows NT\MSScan\*.*
C:\Users\All Users\Microsoft\WwanSvc\*.*
C:\Users\All Users\Microsoft\WwanSvc\Profiles\*.*
C:\Users\All Users\Microsoft Help\*.*
C:\Users\All Users\Microsoft OneDrive\*.*
C:\Users\All Users\Microsoft OneDrive\setup\*.*
C:\Users\All Users\Microsoft Toolkit\*.*
C:\Users\All Users\Mozilla\*.*
C:\Users\All Users\Mozilla\logs\*.*
C:\Users\All Users\Mozilla\updates\*.*
C:\Users\All Users\Mozilla\updates\E7CF176E110C211B\*.*
C:\Users\All Users\Package Cache\*.*
C:\Users\All Users\Package Cache\{AF12A465-EA47-447D-B6BF-2A82CDBE2F0E}v3.8.6994.0\*.*
C:\Users\All Users\regid.1991-06.com.microsoft\*.*
C:\Users\All Users\shimgen\*.*
C:\Users\All Users\shimgen\generatedfiles\*.*
C:\Users\All Users\Start Menu\*.*
C:\Users\All Users\Sun\*.*
C:\Users\All Users\Sun\Java\*.*
C:\Users\All Users\Sun\Java\Java Update\*.*
C:\Users\All Users\Templates\*.*
C:\Users\Default\*.*
C:\Users\Default\AppData\*.*
C:\Users\Default\AppData\Local\*.*
C:\Users\Default\AppData\Local\Application Data\*.*
C:\Users\Default\AppData\Local\History\*.*
C:\Users\Default\AppData\Local\Microsoft\*.*
C:\Users\Default\AppData\Local\Microsoft\Windows\*.*
C:\Users\Default\AppData\Local\Microsoft\Windows\GameExplorer\*.*
C:\Users\Default\AppData\Local\Microsoft\Windows\History\*.*
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\*.*
C:\Users\Default\AppData\Local\Temp\*.*
C:\Users\Default\AppData\Local\Temporary Internet Files\*.*
C:\Users\Default\AppData\Roaming\*.*
C:\Users\Default\AppData\Roaming\Media Center Programs\*.*
C:\Users\Default\AppData\Roaming\Microsoft\*.*
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\*.*
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\*.*
C:\Users\Default\AppData\Roaming\Microsoft\Windows\*.*
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies\*.*
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts\*.*
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\*.*
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent\*.*
C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\*.*
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\*.*
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\*.*
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\*.*
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\*.*
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\*.*
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\*.*
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates\*.*
C:\Users\Default\Application Data\*.*
C:\Users\Default\Cookies\*.*
C:\Users\Default\Desktop\*.*
C:\Users\Default\Documents\*.*
C:\Users\Default\Documents\My Music\*.*
C:\Users\Default\Documents\My Pictures\*.*
C:\Users\Default\Documents\My Videos\*.*
C:\Users\Default\Downloads\*.*
C:\Users\Default\Favorites\*.*
C:\Users\Default\Links\*.*
C:\Users\Default\Local Settings\*.*
C:\Users\Default\Music\*.*
C:\Users\Default\My Documents\*.*
C:\Users\Default\NetHood\*.*
C:\Users\Default\Pictures\*.*
C:\Users\Default\PrintHood\*.*
C:\Users\Default\Recent\*.*
C:\Users\Default\Saved Games\*.*
C:\Users\Default\SendTo\*.*
C:\Users\Default\Start Menu\*.*
C:\Users\Default\Templates\*.*
C:\Users\Default\Videos\*.*
C:\Users\Default User\*.*
C:\Users\Louise\*.*
C:\Users\Louise\AppData\*.*
C:\Users\Louise\AppData\Local\*.*
C:\Users\Louise\AppData\Local\Adobe\*.*
C:\Users\Louise\AppData\Local\Adobe\Acrobat\*.*
C:\Users\Louise\AppData\Local\Adobe\Acrobat\11.0\*.*
C:\Users\Louise\AppData\Local\Adobe\Acrobat\11.0\Cache\*.*
C:\Users\Louise\AppData\Local\Adobe\Color\*.*
C:\Users\Louise\AppData\Local\Adobe\Color\Profiles\*.*
C:\Users\Louise\AppData\Local\Application Data\*.*
C:\Users\Louise\AppData\Local\ApplicationHistory\*.*
C:\Users\Louise\AppData\Local\CrashDumps\*.*
C:\Users\Louise\AppData\Local\Google\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\BrowserMetrics\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\CertificateRevocation\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Crashpad\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Crashpad\reports\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Crowd Deny\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\blob_storage\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\blob_storage\6a244f92-bb86-401f-9f20-1aa6374054d1\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Cache\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Code Cache\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index-dir\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\databases\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Extension State\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\GCM Store\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\GPUCache\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Local Storage\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Session Storage\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Storage\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Code Cache\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Code Cache\js\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Code Cache\js\index-dir\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Code Cache\wasm\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Code Cache\wasm\index-dir\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Sync Data\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\FileTypePolicies\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\FontLookupTableCache\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\InterventionPolicyDatabase\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\MEIPreload\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\OriginTrials\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\PepperFlash\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\pnacl\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\RecoveryImproved\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Safe Browsing\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\SafetyTips\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\ShaderCache\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\ShaderCache\GPUCache\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\SSLErrorAssistant\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Subresource Filter\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\Subresource Filter\Unindexed Rules\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\SwReporter\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\ThirdPartyModuleList32\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\TLSDeprecationConfig\*.*
C:\Users\Louise\AppData\Local\Google\Chrome\User Data\WidevineCdm\*.*
C:\Users\Louise\AppData\Local\History\*.*
C:\Users\Louise\AppData\Local\Microsoft\*.*
C:\Users\Louise\AppData\Local\Microsoft\Credentials\*.*
C:\Users\Louise\AppData\Local\Microsoft\Feeds\*.*
C:\Users\Louise\AppData\Local\Microsoft\Feeds\Feeds for United States~\*.*
C:\Users\Louise\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\*.*
C:\Users\Louise\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\*.*
C:\Users\Louise\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\*.*
C:\Users\Louise\AppData\Local\Microsoft\Feeds Cache\*.*
C:\Users\Louise\AppData\Local\Microsoft\Feeds Cache\IZC14L8H\*.*
C:\Users\Louise\AppData\Local\Microsoft\Feeds Cache\MR8QC02Y\*.*
C:\Users\Louise\AppData\Local\Microsoft\Feeds Cache\N0MNZJ6N\*.*
C:\Users\Louise\AppData\Local\Microsoft\Feeds Cache\NUKWPKXX\*.*
C:\Users\Louise\AppData\Local\Microsoft\Feeds Cache\OFRRZS5P\*.*
C:\Users\Louise\AppData\Local\Microsoft\Feeds Cache\OJQRI4K9\*.*
C:\Users\Louise\AppData\Local\Microsoft\Feeds Cache\WA7NWDXX\*.*
C:\Users\Louise\AppData\Local\Microsoft\Feeds Cache\XTTU60BR\*.*
C:\Users\Louise\AppData\Local\Microsoft\Feeds Cache\ZMB5BCSS\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\DomainSuggestions\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\DOMStore\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\DOMStore\7ZX7Y4FJ\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\DOMStore\E8NBI4MQ\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\DOMStore\EM1JJLNU\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\DOMStore\F0HVAWRX\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\EmieSiteList\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\EmieUserList\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\EUPP\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\IECompatData\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\imagestore\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\imagestore\aw9h5kp\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\Recovery\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\Recovery\High\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Last Active\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\Recovery\Last Active\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\TabRoaming\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\Tiles\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\Tiles\pin9728060290\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\Tracking Protection\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\UrlBlockManager\*.*
C:\Users\Louise\AppData\Local\Microsoft\Internet Explorer\VersionManager\*.*
C:\Users\Louise\AppData\Local\Microsoft\Media Player\*.*
C:\Users\Louise\AppData\Local\Microsoft\Media Player\Sync Playlists\*.*
C:\Users\Louise\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\*.*
C:\Users\Louise\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\0001EE24\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\14.0\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\16.0\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\16.0\BackstageInAppNavCache\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\16.0\BackstageInAppNavCache\MyComputer\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\16.0\Feedback\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\16.0\Floodgate\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\16.0\WebServiceCache\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\16.0\Wef\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\16.0\Wef\AppCommands\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\DLP\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\DLP\mip\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\DLP\mip\logs\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\Groove\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\Groove\System\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\Groove\User\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\Licenses\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\Licenses\5\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\ONetConfig\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\OTele\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\10603e4aa73ff6a21aef268392ee6406\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\10603e4aa73ff6a21aef268392ee6406\PackageResources\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\10603e4aa73ff6a21aef268392ee6406\PackageResources\OfflineFiles\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\1803c8f29ee95d2557613c4de7393e2e\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\1803c8f29ee95d2557613c4de7393e2e\PackageResources\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\1803c8f29ee95d2557613c4de7393e2e\PackageResources\OfflineFiles\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\2cb4e5934825a9774c1918dd8c76c9c7\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\2cb4e5934825a9774c1918dd8c76c9c7\PackageResources\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\2cb4e5934825a9774c1918dd8c76c9c7\PackageResources\OfflineFiles\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\33147523bd5f4ce49012f6461c11dce\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\33147523bd5f4ce49012f6461c11dce\PackageResources\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\33147523bd5f4ce49012f6461c11dce\PackageResources\OfflineFiles\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\3ebfe4e6c2ecf1dbfd2b11f30807151\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\3ebfe4e6c2ecf1dbfd2b11f30807151\PackageResources\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\3ebfe4e6c2ecf1dbfd2b11f30807151\PackageResources\OfflineFiles\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\8b05ab141beabd2172531e9699ab7b7f\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\8b05ab141beabd2172531e9699ab7b7f\PackageResources\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\8b05ab141beabd2172531e9699ab7b7f\PackageResources\OfflineFiles\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\8b914647b6c47c811ac0672e62e3cbbd\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\8b914647b6c47c811ac0672e62e3cbbd\PackageResources\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\8b914647b6c47c811ac0672e62e3cbbd\PackageResources\OfflineFiles\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\da433c30eb8ee2d0def1236748442eda\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\da433c30eb8ee2d0def1236748442eda\PackageResources\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\da433c30eb8ee2d0def1236748442eda\PackageResources\OfflineFiles\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\e9c9a46fb612fccdf3582de9939eaa4c\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\e9c9a46fb612fccdf3582de9939eaa4c\PackageResources\*.*
C:\Users\Louise\AppData\Local\Microsoft\Office\SolutionPackages\e9c9a46fb612fccdf3582de9939eaa4c\PackageResources\OfflineFiles\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\adm\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\adm\de\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\adm\es\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\adm\fr\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\adm\hu\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\adm\it\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\adm\ja\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\adm\ko\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\adm\nl\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\adm\pl\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\adm\pt-BR\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\adm\pt-PT\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\adm\ru\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\adm\sv\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\adm\tr\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\adm\zh-CN\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\adm\zh-TW\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\af\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\am-ET\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\amd64\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ar\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\arm64\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\as-IN\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\az-Latn-AZ\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\be\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\bg\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\bn-BD\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\bn-IN\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\bs-Latn-BA\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ca\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ca-Es-VALENCIA\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\cs\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\cy-GB\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\da\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\de\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\el\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\en\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\en-GB\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\en-US\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\es\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\et\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\eu\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\fa\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\fi\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\fil-PH\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\FileCoAuth.exe
C:\Users\Louise\AppData\Local\Microsoft
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\FileSyncConfig.exe
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\FileSyncHelper.exe
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\fr\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ga-IE\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\gd\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\gl\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\gu\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ha-Latn-NG\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\he\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\hi\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\hr\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\hu\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\hy\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\id\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ig-NG\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\imageformats\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\images\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\images\darkTheme\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\images\lightTheme\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\IRMProtectors\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\is\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\it\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ja\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ka\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\kk\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\km-KH\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\kn\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ko\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\kok\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ku-Arab\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ky\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\lb-LU\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\lt\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\lv\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\mi-NZ\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\mk\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ml-in\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\mn\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\mr\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ms\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\mt-MT\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\nb-NO\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ne-NP\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\nl\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\nn-NO\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\nso-ZA\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\OneDriveSetup.exe
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\OneDriveUpdaterService.exe
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\or-IN\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\pa\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\pa-Arab-PK\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\pl\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\platforms\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\prs-AF\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\pt-BR\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\pt-PT\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\qml\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\qml\QtQml\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\qml\QtQml\Models.2\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\qml\QtQuick\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\qml\QtQuick\Controls\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\qml\QtQuick\Controls\Private\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\qml\QtQuick\Controls\Styles\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\qml\QtQuick\Controls\Styles\Base\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\qml\QtQuick\Controls\Styles\Flat\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\qml\QtQuick\Controls.2\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\qml\QtQuick\Extras\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\qml\QtQuick\Layouts\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\qml\QtQuick\Templates.2\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\qml\QtQuick\Window.2\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\qml\QtQuick.2\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\quc\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\quz-PE\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ro\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ru\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\rw\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\sd-Arab-PK\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\si-LK\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\sk\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\sl\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\sq\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\sr-Cyrl-BA\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\sr-Cyrl-RS\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\sr-Latn-RS\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\sv\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\sw\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ta\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\te\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\tg\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\th\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ti\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\tk-TM\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\tn-ZA\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\tr\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\tt\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ug\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\uk\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\ur\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\uz-Latn-UZ\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\vi\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\wo\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\xh-ZA\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\yo-NG\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\zh-CN\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\zh-TW\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\zu-ZA\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\LogoImages\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\logs\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\logs\Common\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\logs\setup\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\setup\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\setup\logs\*.*
C:\Users\Louise\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\*.*
C:\Users\Louise\AppData\Local\Microsoft\PlayReady\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\1024\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\1033\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\AppCache\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\AppCache\BKPCMDD8\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Burn\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Burn\Burn\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Caches\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Explorer\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\GameExplorer\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\History\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\History\History.IE5\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\History\Low\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\History\Low\History.IE5\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\PowerShell\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Ringtones\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\AntiPhishing\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\27XJCA2W\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AZ21FG2P\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO2XPHJ7\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QYHUQKJQ\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Sqm\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\Users\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\Users\Louise\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\Users\Louise\AppData\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\Users\Louise\AppData\Roaming\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\Users\Louise\AppData\Roaming\Microsoft\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\Users\Louise\AppData\Roaming\Microsoft\Windows\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\Users\Louise\AppData\Roaming\Microsoft\Windows\PrivacIE\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\Users\Louise\AppData\Roaming\Microsoft\Windows\PrivacIE\Low\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Themes\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\WebCache\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\WER\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\WER\ERC\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\WER\ReportArchive\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_Setup.exe_Micros_32a142164fa937f0791fdbde39aab0d3d5d178cf_0a6f0c10\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_Setup.exe_Micros_32a142164fa937f0791fdbde39aab0d3d5d178cf_0ad5c48c\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\WER\ReportQueue\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\WER\ReportQueue\AppCrash_Setup.exe_Micros_32a142164fa937f0791fdbde39aab0d3d5d178cf_cab_073992c6\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_3eb5ea8473594499407cacbd9887e2953d50fd80_cab_0830ff01\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_d0c641ef89a8d207056286596bafe75f59844_cab_0830d4d4\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_f41138ce89dcf347fa17318e894380b255473673_cab_08310114\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows\Windows Anytime Upgrade\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows Mail\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows Mail\Backup\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows Mail\Backup\new\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows Mail\Stationery\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows Media\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows Media\12.0\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows Sidebar\*.*
C:\Users\Louise\AppData\Local\Microsoft\Windows Sidebar\Gadgets\*.*
C:\Users\Louise\AppData\Local\Microsoft Help\*.*
C:\Users\Louise\AppData\Local\Mozilla\*.*
C:\Users\Louise\AppData\Local\Mozilla\Firefox\*.*
C:\Users\Louise\AppData\Local\Mozilla\Firefox\Profiles\*.*
C:\Users\Louise\AppData\Local\Mozilla\Firefox\Profiles\0f9yudun.default\*.*
C:\Users\Louise\AppData\Local\Mozilla\Firefox\Profiles\0f9yudun.default\cache2\*.*
C:\Users\Louise\AppData\Local\Mozilla\Firefox\Profiles\0f9yudun.default\cache2\doomed\*.*
C:\Users\Louise\AppData\Local\Mozilla\Firefox\Profiles\0f9yudun.default\cache2\entries\*.*
C:\Users\Louise\AppData\Local\Mozilla\Firefox\Profiles\0f9yudun.default\jumpListCache\*.*
C:\Users\Louise\AppData\Local\Mozilla\Firefox\Profiles\0f9yudun.default\OfflineCache\*.*
C:\Users\Louise\AppData\Local\Mozilla\Firefox\Profiles\0f9yudun.default\safebrowsing\*.*
C:\Users\Louise\AppData\Local\Mozilla\Firefox\Profiles\0f9yudun.default\safebrowsing\google4\*.*
C:\Users\Louise\AppData\Local\Mozilla\Firefox\Profiles\0f9yudun.default\startupCache\*.*
C:\Users\Louise\AppData\Local\Mozilla\Firefox\Profiles\0f9yudun.default\thumbnails\*.*
C:\Users\Louise\AppData\Local\NuGet\*.*
C:\Users\Louise\AppData\Local\NuGet\Cache\*.*
C:\Users\Louise\AppData\Local\Package Cache\*.*
C:\Users\Louise\AppData\Local\Package Cache\{09CC0C6D-0822-491E-A10E-2A8443DDF170}v3.8.2150.0\*.*
C:\Users\Louise\AppData\Local\Package Cache\{12B4F371-ACE2-435B-BCF1-623F36C4E176}v3.8.2150.0\*.*
C:\Users\Louise\AppData\Local\Package Cache\{2E818780-AC79-4BC0-8023-C1CC46EAC9B6}v3.8.2150.0\*.*
C:\Users\Louise\AppData\Local\Package Cache\{3182483d-078b-48fa-92c2-798baa1fe27d}\*.*
C:\Users\Louise\AppData\Local\Package Cache\{3182483d-078b-48fa-92c2-798baa1fe27d}\python-3.8.2.exe
C:\Users\Louise\AppData\Local\Package Cache
C:\Users\Louise\AppData\Local\Package Cache\{3182483d-078b-48fa-92c2-798baa1fe27d}
C:\Users\Louise\AppData\Local\Package Cache\{45CEE0C6-5BB2-4A8B-B83C-58559A1CA424}v3.8.2150.0\*.*
C:\Users\Louise\AppData\Local\Package Cache\{6BA6203C-85AB-4B9E-8582-CE31B1B5C0ED}v3.8.2150.0\*.*
C:\Users\Louise\AppData\Local\Package Cache\{B1528EAE-7E64-49DB-8CE1-514EB30BB38B}v3.8.2150.0\*.*
C:\Users\Louise\AppData\Local\Package Cache\{D09DF89B-E013-43F8-8ED8-6D6B9D4A1CDA}v3.8.2150.0\*.*
C:\Users\Louise\AppData\Local\Package Cache\{E284B869-7701-4A91-82C2-D3E66974A0F9}v3.8.2150.0\*.*
C:\Users\Louise\AppData\Local\Package Cache\{EE21EEE7-9D5A-4ECE-B60F-4BFA63BDA937}v3.8.2150.0\*.*
C:\Users\Louise\AppData\Local\Package Cache\{FE5BE50D-21D5-44FB-9A97-5010E68608DA}v3.8.2150.0\*.*
C:\Users\Louise\AppData\Local\pip\*.*
C:\Users\Louise\AppData\Local\pip\cache\*.*
C:\Users\Louise\AppData\Local\pip\cache\http\*.*
C:\Users\Louise\AppData\Local\pip\cache\http\4\*.*
C:\Users\Louise\AppData\Local\pip\cache\http\4\0\*.*
C:\Users\Louise\AppData\Local\pip\cache\http\4\0\2\*.*
C:\Users\Louise\AppData\Local\pip\cache\http\4\0\2\e\*.*
C:\Users\Louise\AppData\Local\pip\cache\http\4\0\2\e\b\*.*
C:\Users\Louise\AppData\Local\pip\cache\http\4\e\*.*
C:\Users\Louise\AppData\Local\pip\cache\http\4\e\e\*.*
C:\Users\Louise\AppData\Local\pip\cache\http\4\e\e\3\*.*
C:\Users\Louise\AppData\Local\pip\cache\http\4\e\e\3\1\*.*
C:\Users\Louise\AppData\Local\pip\cache\http\a\*.*
C:\Users\Louise\AppData\Local\pip\cache\http\a\1\*.*
C:\Users\Louise\AppData\Local\pip\cache\http\a\1\9\*.*
C:\Users\Louise\AppData\Local\pip\cache\http\a\1\9\5\*.*
C:\Users\Louise\AppData\Local\pip\cache\http\a\1\9\5\3\*.*
C:\Users\Louise\AppData\Local\Programs\*.*
C:\Users\Louise\AppData\Local\Programs\Common\*.*
C:\Users\Louise\AppData\Local\Programs\Python\*.*
C:\Users\Louise\AppData\Local\Programs\Python\Python38-32\*.*
C:\Users\Louise\AppData\Local\Temp\*.*
C:\Users\Louise\AppData\Local\Temp\Low\*.*
C:\Users\Louise\AppData\Local\Temp\WPDNSE\*.*
C:\Users\Louise\AppData\Local\Temporary Internet Files\*.*
C:\Users\Louise\AppData\Local\VirtualStore\*.*
C:\Users\Louise\AppData\LocalLow\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Acrobat\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Acrobat\11.0\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Acrobat\11.0\assets\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Acrobat\11.0\Reader\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Acrobat\11.0\Reader\RFL\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Acrobat\11.0\Reader\RFL\LocalMapping\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Acrobat\11.0\Reader\Synchronizer\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Acrobat\11.0\Reader\Synchronizer\metadata\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Acrobat\11.0\Reader\Synchronizer\resources\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Acrobat\11.0\Search\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Linguistics\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Linguistics\UserDictionaries\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Linguistics\UserDictionaries\Adobe Custom Dictionary\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Linguistics\UserDictionaries\Adobe Custom Dictionary\all\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Linguistics\UserDictionaries\Adobe Custom Dictionary\de_CH\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Linguistics\UserDictionaries\Adobe Custom Dictionary\de_DE\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Linguistics\UserDictionaries\Adobe Custom Dictionary\en_CA\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Linguistics\UserDictionaries\Adobe Custom Dictionary\en_GB\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Linguistics\UserDictionaries\Adobe Custom Dictionary\en_US\*.*
C:\Users\Louise\AppData\LocalLow\Adobe\Linguistics\UserDictionaries\Adobe Custom Dictionary\nl_NL\*.*
C:\Users\Louise\AppData\LocalLow\Microsoft\*.*
C:\Users\Louise\AppData\LocalLow\Microsoft\CryptnetUrlCache\*.*
C:\Users\Louise\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\*.*
C:\Users\Louise\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\*.*
C:\Users\Louise\AppData\LocalLow\Microsoft\Internet Explorer\*.*
C:\Users\Louise\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\*.*
C:\Users\Louise\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\284QPDKA\*.*
C:\Users\Louise\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\6SLMVW6Y\*.*
C:\Users\Louise\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\RMDCYLM1\*.*
C:\Users\Louise\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\SVJ4F1Q2\*.*
C:\Users\Louise\AppData\LocalLow\Microsoft\Internet Explorer\EmieSiteList\*.*
C:\Users\Louise\AppData\LocalLow\Microsoft\Internet Explorer\EmieUserList\*.*
C:\Users\Louise\AppData\LocalLow\Microsoft\Internet Explorer\Services\*.*
C:\Users\Louise\AppData\LocalLow\Microsoft\Silverlight\*.*
C:\Users\Louise\AppData\LocalLow\Microsoft\Windows\*.*
C:\Users\Louise\AppData\LocalLow\Microsoft\Windows\AppCache\*.*
C:\Users\Louise\AppData\LocalLow\Microsoft\Windows\AppCache\PLCNY9L1\*.*
C:\Users\Louise\AppData\LocalLow\Mozilla\*.*
C:\Users\Louise\AppData\LocalLow\Sun\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\AU\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\host\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\muffin\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\security\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\0\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\1\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\10\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\11\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\12\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\13\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\14\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\15\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\16\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\17\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\18\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\19\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\2\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\20\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\21\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\22\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\23\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\24\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\25\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\26\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\27\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\28\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\29\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\3\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\30\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\31\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\33\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\34\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\35\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\36\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\37\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\38\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\39\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\4\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\40\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\41\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\42\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\43\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\44\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\45\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\46\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\47\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\48\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\49\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\5\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\50\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\51\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\52\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\53\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\54\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\55\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\56\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\57\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\58\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\59\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\6\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\60\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\61\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\62\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\63\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\7\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\8\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\9\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\tmp\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\Deployment\tmp\si\*.*
C:\Users\Louise\AppData\LocalLow\Sun\Java\jre1.7.0_17\*.*
C:\Users\Louise\AppData\Roaming\*.*
C:\Users\Louise\AppData\Roaming\Adobe\*.*
C:\Users\Louise\AppData\Roaming\Adobe\Acrobat\*.*
C:\Users\Louise\AppData\Roaming\Adobe\Acrobat\11.0\*.*
C:\Users\Louise\AppData\Roaming\Adobe\Acrobat\11.0\Collab\*.*
C:\Users\Louise\AppData\Roaming\Adobe\Acrobat\11.0\Forms\*.*
C:\Users\Louise\AppData\Roaming\Adobe\Acrobat\11.0\JSCache\*.*
C:\Users\Louise\AppData\Roaming\Adobe\Acrobat\11.0\Security\*.*
C:\Users\Louise\AppData\Roaming\Adobe\AcroExt\*.*
C:\Users\Louise\AppData\Roaming\Adobe\AcroExt\Reader\*.*
C:\Users\Louise\AppData\Roaming\Adobe\AcroExt\Reader\11.0\*.*
C:\Users\Louise\AppData\Roaming\Adobe\AcroExt\Reader\11.0\cache\*.*
C:\Users\Louise\AppData\Roaming\Adobe\Flash Player\*.*
C:\Users\Louise\AppData\Roaming\Adobe\Flash Player\AssetCache\*.*
C:\Users\Louise\AppData\Roaming\Adobe\Flash Player\AssetCache\PY9FNTVD\*.*
C:\Users\Louise\AppData\Roaming\Adobe\Flash Player\NativeCache\*.*
C:\Users\Louise\AppData\Roaming\Adobe\Headlights\*.*
C:\Users\Louise\AppData\Roaming\Adobe\Linguistics\*.*
C:\Users\Louise\AppData\Roaming\Adobe\LogTransport2\*.*
C:\Users\Louise\AppData\Roaming\Identities\*.*
C:\Users\Louise\AppData\Roaming\Identities\{5F37F099-726C-41B1-A10F-ADFDB822499D}\*.*
C:\Users\Louise\AppData\Roaming\IrfanView\*.*
C:\Users\Louise\AppData\Roaming\Media Center Programs\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\AddIns\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\CLView\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\CLView\1033\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Credentials\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Crypto\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Crypto\RSA\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-1339698970-4093829097-1161395185-1000\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Document Building Blocks\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Document Building Blocks\1033\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Document Building Blocks\1033\14\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Excel\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Installer\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Installer\{B1528EAE-7E64-49DB-8CE1-514EB30BB38B}\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Installer\{B1528EAE-7E64-49DB-8CE1-514EB30BB38B}\idle.exe
C:\Users\Louise\AppData\Roaming\Microsoft
C:\Users\Louise\AppData\Roaming\Microsoft\Installer
C:\Users\Louise\AppData\Roaming\Microsoft\Installer\{B1528EAE-7E64-49DB-8CE1-514EB30BB38B}
C:\Users\Louise\AppData\Roaming\Microsoft\Internet Explorer\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Internet Explorer\UserData\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Network\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Network\Connections\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Network\Connections\Pbk\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Office\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Office\Recent\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\PowerPoint\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Proof\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Protect\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Protect\S-1-5-21-1339698970-4093829097-1161395185-1000\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Skype for Desktop\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Skype for Desktop\blob_storage\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Skype for Desktop\blob_storage\5a03fdeb-8589-4535-8ff9-89d5a278e5c4\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Skype for Desktop\Cache\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Skype for Desktop\CS_skylib\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Skype for Desktop\dictionaries\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Skype for Desktop\Local Storage\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Skype for Desktop\Local Storage\leveldb\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Skype for Desktop\logs\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Skype for Desktop\skylib\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Skype for Desktop\SkypeRT\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Skype for Desktop\webrtc_event_logs\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Speech\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Spelling\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\SystemCertificates\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\SystemCertificates\My\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Templates\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Templates\LiveContent\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Templates\LiveContent\16\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\Document Themes\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Templates\LiveContent\16\User\Document Themes\1033\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\UProof\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Cookies\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Cookies\Low\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\DNTException\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\DNTException\Low\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\IECompatCache\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\IECompatCache\Low\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\IECompatUACache\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\IECompatUACache\Low\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\IEDownloadHistory\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\IETldCache\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\IETldCache\Low\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Libraries\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Network Shortcuts\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\PrivacIE\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\PrivacIE\Low\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Recent\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\SendTo\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Start Menu\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.8\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Templates\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Windows\Themes\*.*
C:\Users\Louise\AppData\Roaming\Microsoft\Word\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Extensions\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Crash Reports\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Crash Reports\events\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Pending Pings\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\bookmarkbackups\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\crashes\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\crashes\events\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\datareporting\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\datareporting\archived\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\datareporting\archived\2020-04\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\datareporting\archived\2020-05\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\extensions\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\healthreport\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\minidumps\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\saved-telemetry-pings\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\sessionstore-backups\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\storage\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\storage\default\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\storage\default\moz-extension+++a71d39f3-7325-47a7-8e4e-0af8c98a10ce^userContextId=4294967295\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\storage\default\moz-extension+++a71d39f3-7325-47a7-8e4e-0af8c98a10ce^userContextId=4294967295\idb\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\storage\default\moz-extension+++a71d39f3-7325-47a7-8e4e-0af8c98a10ce^userContextId=4294967295\idb\3647222921wleabcEoxlt-eengsairo.files\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\storage\permanent\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\storage\permanent\chrome\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\storage\permanent\chrome\idb\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.files\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.files\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.files\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\storage\permanent\chrome\idb\2918063365piupsah.files\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\storage\permanent\chrome\idb\3561288849sdhlie.files\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.files\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\storage\permanent\chrome\idb\846562544phus.files\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\storage\temporary\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\weave\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\weave\failed\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\weave\toFetch\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\Firefox\Profiles\0f9yudun.default\webapps\*.*
C:\Users\Louise\AppData\Roaming\Mozilla\SystemExtensionsDev\*.*
C:\Users\Louise\AppData\Roaming\Notepad++\*.*
C:\Users\Louise\AppData\Roaming\Notepad++\plugins\*.*
C:\Users\Louise\AppData\Roaming\Notepad++\plugins\config\*.*
C:\Users\Louise\AppData\Roaming\Notepad++\plugins\config\Hunspell\*.*
C:\Users\Louise\AppData\Roaming\Notepad++\themes\*.*
C:\Users\Louise\AppData\Roaming\NuGet\*.*
C:\Users\Louise\AppData\Roaming\Skype\*.*
C:\Users\Louise\AppData\Roaming\Skype\logs\*.*
C:\Users\Louise\AppData\Roaming\WinRAR\*.*
C:\Users\Louise\Application Data\*.*
C:\Users\Louise\Contacts\*.*
C:\Users\Louise\Cookies\*.*
C:\Users\Louise\Desktop\*.*
C:\Users\Louise\Documents\*.*
C:\Users\Louise\Documents\My Music\*.*
C:\Users\Louise\Documents\My Pictures\*.*
C:\Users\Louise\Documents\My Videos\*.*
C:\Users\Louise\Documents\WindowsPowerShell\*.*
C:\Users\Louise\Downloads\*.*
C:\Users\Louise\Downloads\MicrosoftToolkit252.exe
C:\Users\Louise\Downloads
C:\Users\Louise\Favorites\*.*
C:\Users\Louise\Favorites\Links\*.*
C:\Users\Louise\Favorites\Links for United States\*.*
C:\Users\Louise\Favorites\Microsoft Websites\*.*
C:\Users\Louise\Favorites\MSN Websites\*.*
C:\Users\Louise\Favorites\Windows Live\*.*
C:\Users\Louise\Links\*.*
C:\Users\Louise\Local Settings\*.*
C:\Users\Louise\Music\*.*
C:\Users\Louise\My Documents\*.*
C:\Users\Louise\NetHood\*.*
C:\Users\Louise\OneDrive\*.*
C:\Users\Louise\Pictures\*.*
C:\Users\Louise\PrintHood\*.*
C:\Users\Louise\Recent\*.*
C:\Users\Louise\Saved Games\*.*
C:\Users\Louise\Searches\*.*
C:\Users\Louise\SendTo\*.*
C:\Users\Louise\Start Menu\*.*
C:\Users\Louise\Templates\*.*
C:\Users\Louise\Videos\*.*
C:\Users\Public\*.*
C:\Users\Public\Desktop\*.*
C:\Users\Public\Documents\*.*
C:\Users\Public\Documents\My Music\*.*
C:\Users\Public\Documents\My Pictures\*.*
C:\Users\Public\Documents\My Videos\*.*
C:\Users\Public\Downloads\*.*
C:\Users\Public\Favorites\*.*
C:\Users\Public\Libraries\*.*
C:\Users\Public\Music\*.*
C:\Users\Public\Music\Sample Music\*.*
C:\Users\Public\Pictures\*.*
C:\Users\Public\Pictures\Sample Pictures\*.*
C:\Users\Public\Recorded TV\*.*
C:\Users\Public\Recorded TV\Sample Media\*.*
C:\Users\Public\Videos\*.*
C:\Users\Public\Videos\Sample Videos\*.*
C:\Windows\*.*
C:\Windows\addins\*.*
C:\Windows\AppCompat\*.*
C:\Windows\AppCompat\Appraiser\*.*
C:\Windows\AppCompat\Appraiser\Telemetry\*.*
C:\Windows\AppCompat\Programs\*.*
C:\Windows\AppPatch\*.*
C:\Windows\AppPatch\AppPatch64\*.*
C:\Windows\AppPatch\Custom\*.*
C:\Windows\AppPatch\Custom\Custom64\*.*
C:\Windows\AppPatch\en-US\*.*
C:\Windows\assembly\*.*
C:\Windows\assembly\GAC\*.*
C:\Windows\assembly\GAC\Accessibility\*.*
C:\Windows\assembly\GAC\Accessibility\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\ADODB\*.*
C:\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\cscompmgd\*.*
C:\Windows\assembly\GAC\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\CustomMarshalers\*.*
C:\Windows\assembly\GAC\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\Extensibility\*.*
C:\Windows\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\IEExecRemote\*.*
C:\Windows\assembly\GAC\IEExecRemote\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\IEHost\*.*
C:\Windows\assembly\GAC\IEHost\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\IIEHost\*.*
C:\Windows\assembly\GAC\IIEHost\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\ISymWrapper\*.*
C:\Windows\assembly\GAC\ISymWrapper\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\Microsoft.Ink\*.*
C:\Windows\assembly\GAC\Microsoft.Ink\1.0.2201.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC\Microsoft.Ink\1.7.2600.2180__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC\Microsoft.JScript\*.*
C:\Windows\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\Microsoft.mshtml\*.*
C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\Microsoft.StdFormat\*.*
C:\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\Microsoft.VisualBasic\*.*
C:\Windows\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\Microsoft.VisualBasic.Vsa\*.*
C:\Windows\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\Microsoft.VisualC\*.*
C:\Windows\assembly\GAC\Microsoft.VisualC\7.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\Microsoft.Vsa\*.*
C:\Windows\assembly\GAC\Microsoft.Vsa\7.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\*.*
C:\Windows\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\Microsoft_VsaVb\*.*
C:\Windows\assembly\GAC\Microsoft_VsaVb\7.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\mscomctl\*.*
C:\Windows\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC\mscorcfg\*.*
C:\Windows\assembly\GAC\mscorcfg\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\MSDATASRC\*.*
C:\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\Regcode\*.*
C:\Windows\assembly\GAC\Regcode\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\stdole\*.*
C:\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\System\*.*
C:\Windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\*.*
C:\Windows\assembly\GAC\System.Configuration.Install\*.*
C:\Windows\assembly\GAC\System.Configuration.Install\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\System.Data\*.*
C:\Windows\assembly\GAC\System.Data\1.0.5000.0__b77a5c561934e089\*.*
C:\Windows\assembly\GAC\System.Data.OracleClient\*.*
C:\Windows\assembly\GAC\System.Data.OracleClient\1.0.5000.0__b77a5c561934e089\*.*
C:\Windows\assembly\GAC\System.Design\*.*
C:\Windows\assembly\GAC\System.Design\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\System.DirectoryServices\*.*
C:\Windows\assembly\GAC\System.DirectoryServices\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\System.Drawing\*.*
C:\Windows\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\System.Drawing.Design\*.*
C:\Windows\assembly\GAC\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\System.EnterpriseServices\*.*
C:\Windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\System.Management\*.*
C:\Windows\assembly\GAC\System.Management\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\System.Messaging\*.*
C:\Windows\assembly\GAC\System.Messaging\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\System.Runtime.Remoting\*.*
C:\Windows\assembly\GAC\System.Runtime.Remoting\1.0.5000.0__b77a5c561934e089\*.*
C:\Windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\*.*
C:\Windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\System.Security\*.*
C:\Windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\System.ServiceProcess\*.*
C:\Windows\assembly\GAC\System.ServiceProcess\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\System.Web\*.*
C:\Windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\System.Web.Mobile\*.*
C:\Windows\assembly\GAC\System.Web.Mobile\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\System.Web.RegularExpressions\*.*
C:\Windows\assembly\GAC\System.Web.RegularExpressions\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\System.Web.Services\*.*
C:\Windows\assembly\GAC\System.Web.Services\1.0.5000.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC\System.Windows.Forms\*.*
C:\Windows\assembly\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089\*.*
C:\Windows\assembly\GAC\System.Xml\*.*
C:\Windows\assembly\GAC\System.Xml\1.0.5000.0__b77a5c561934e089\*.*
C:\Windows\assembly\GAC_32\*.*
C:\Windows\assembly\GAC_32\AuditPolicyGPManagedStubs.Interop\*.*
C:\Windows\assembly\GAC_32\AuditPolicyGPManagedStubs.Interop\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\BDATunePIA\*.*
C:\Windows\assembly\GAC_32\BDATunePIA\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\CustomMarshalers\*.*
C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_32\ehexthost32\*.*
C:\Windows\assembly\GAC_32\ehexthost32\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\ehexthost32\6.1.0.0__31bf3856ad364e35\ehexthost32.exe
C:\Windows\assembly\GAC_32\ehexthost32
C:\Windows\assembly\GAC_32\ehexthost32\6.1.0.0__31bf3856ad364e35
C:\Windows\assembly\GAC_32\ISymWrapper\*.*
C:\Windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_32\mcstoredb\*.*
C:\Windows\assembly\GAC_32\mcstoredb\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\*.*
C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\*.*
C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\6.1.0.0_en_31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.Interop\*.*
C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.Interop\2.0.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\Microsoft.Ink\*.*
C:\Windows\assembly\GAC_32\Microsoft.Ink\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\Microsoft.Interop.Security.AzRoles\*.*
C:\Windows\assembly\GAC_32\Microsoft.Interop.Security.AzRoles\2.0.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\Microsoft.Office.Access.BusinessDataCatalog\*.*
C:\Windows\assembly\GAC_32\Microsoft.Office.Access.BusinessDataCatalog\14.0.0.0__71e9bce111e9429c\*.*
C:\Windows\assembly\GAC_32\Microsoft.Office.BusinessData\*.*
C:\Windows\assembly\GAC_32\Microsoft.Office.BusinessData\14.0.0.0__71e9bce111e9429c\*.*
C:\Windows\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\*.*
C:\Windows\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\14.0.0.0__71e9bce111e9429c\*.*
C:\Windows\assembly\GAC_32\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\*.*
C:\Windows\assembly\GAC_32\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\Microsoft.SharePoint.BusinessData.Administration.Client\*.*
C:\Windows\assembly\GAC_32\Microsoft.SharePoint.BusinessData.Administration.Client\14.0.0.0__71e9bce111e9429c\*.*
C:\Windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\*.*
C:\Windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_32\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\*.*
C:\Windows\assembly\GAC_32\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\8.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_32\Microsoft.Windows.Diagnosis.SDEngine\*.*
C:\Windows\assembly\GAC_32\Microsoft.Windows.Diagnosis.SDEngine\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\MSBuild\*.*
C:\Windows\assembly\GAC_32\MSBuild\3.5.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_32\MSBuild\3.5.0.0__b03f5f7f11d50a3a\MSBuild.exe
C:\Windows\assembly\GAC_32\MSBuild\3.5.0.0__b03f5f7f11d50a3a
C:\Windows\assembly\GAC_32\mscorlib\*.*
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\*.*
C:\Windows\assembly\GAC_32\napcrypt\*.*
C:\Windows\assembly\GAC_32\napcrypt\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\naphlpr\*.*
C:\Windows\assembly\GAC_32\naphlpr\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\Policy.1.0.Microsoft.Ink\*.*
C:\Windows\assembly\GAC_32\Policy.1.0.Microsoft.Ink\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\Policy.1.0.Microsoft.Interop.Security.AzRoles\*.*
C:\Windows\assembly\GAC_32\Policy.1.0.Microsoft.Interop.Security.AzRoles\6.1.7600.16385__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\Policy.1.2.Microsoft.Interop.Security.AzRoles\*.*
C:\Windows\assembly\GAC_32\Policy.1.2.Microsoft.Interop.Security.AzRoles\6.1.7600.16385__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\Policy.1.7.Microsoft.Ink\*.*
C:\Windows\assembly\GAC_32\Policy.1.7.Microsoft.Ink\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\Policy.6.0.Microsoft.Ink\*.*
C:\Windows\assembly\GAC_32\Policy.6.0.Microsoft.Ink\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\PresentationCore\*.*
C:\Windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\System.Data\*.*
C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\*.*
C:\Windows\assembly\GAC_32\System.Data.OracleClient\*.*
C:\Windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\*.*
C:\Windows\assembly\GAC_32\System.EnterpriseServices\*.*
C:\Windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_32\System.Printing\*.*
C:\Windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_32\System.Transactions\*.*
C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\*.*
C:\Windows\assembly\GAC_32\System.Web\*.*
C:\Windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_64\*.*
C:\Windows\assembly\GAC_64\AuditPolicyGPManagedStubs.Interop\*.*
C:\Windows\assembly\GAC_64\AuditPolicyGPManagedStubs.Interop\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\BDATunePIA\*.*
C:\Windows\assembly\GAC_64\BDATunePIA\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\CustomMarshalers\*.*
C:\Windows\assembly\GAC_64\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_64\ISymWrapper\*.*
C:\Windows\assembly\GAC_64\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_64\mcstoredb\*.*
C:\Windows\assembly\GAC_64\mcstoredb\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\mcupdate\*.*
C:\Windows\assembly\GAC_64\mcupdate\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\mcupdate\6.1.0.0__31bf3856ad364e35\mcupdate.exe
C:\Windows\assembly\GAC_64\mcupdate\6.1.0.0__31bf3856ad364e35
C:\Windows\assembly\GAC_64\Mcx2Dvcs\*.*
C:\Windows\assembly\GAC_64\Mcx2Dvcs\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop\*.*
C:\Windows\assembly\GAC_64\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\*.*
C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\*.*
C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\6.1.0.0_en_31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.Interop\*.*
C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.Interop\2.0.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\Microsoft.Ink\*.*
C:\Windows\assembly\GAC_64\Microsoft.Ink\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\Microsoft.Interop.Security.AzRoles\*.*
C:\Windows\assembly\GAC_64\Microsoft.Interop.Security.AzRoles\2.0.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\Microsoft.MediaCenter.Interop\*.*
C:\Windows\assembly\GAC_64\Microsoft.MediaCenter.Interop\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\Microsoft.MediaCenter.iTV.Media\*.*
C:\Windows\assembly\GAC_64\Microsoft.MediaCenter.iTV.Media\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\Microsoft.MediaCenter.Mheg\*.*
C:\Windows\assembly\GAC_64\Microsoft.MediaCenter.Mheg\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\Microsoft.MediaCenter.Playback\*.*
C:\Windows\assembly\GAC_64\Microsoft.MediaCenter.Playback\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\Microsoft.MediaCenter.TV.Tuners.Interop\*.*
C:\Windows\assembly\GAC_64\Microsoft.MediaCenter.TV.Tuners.Interop\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\*.*
C:\Windows\assembly\GAC_64\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\*.*
C:\Windows\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_64\Microsoft.Windows.Diagnosis.SDEngine\*.*
C:\Windows\assembly\GAC_64\Microsoft.Windows.Diagnosis.SDEngine\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\MSBuild\*.*
C:\Windows\assembly\GAC_64\MSBuild\3.5.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_64\MSBuild\3.5.0.0__b03f5f7f11d50a3a\MSBuild.exe
C:\Windows\assembly\GAC_64\MSBuild\3.5.0.0__b03f5f7f11d50a3a
C:\Windows\assembly\GAC_64\mscorlib\*.*
C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\*.*
C:\Windows\assembly\GAC_64\napcrypt\*.*
C:\Windows\assembly\GAC_64\napcrypt\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\naphlpr\*.*
C:\Windows\assembly\GAC_64\naphlpr\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\Policy.1.0.Microsoft.Interop.Security.AzRoles\*.*
C:\Windows\assembly\GAC_64\Policy.1.0.Microsoft.Interop.Security.AzRoles\6.1.7600.16385__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\Policy.1.2.Microsoft.Interop.Security.AzRoles\*.*
C:\Windows\assembly\GAC_64\Policy.1.2.Microsoft.Interop.Security.AzRoles\6.1.7600.16385__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\Policy.6.0.Microsoft.Ink\*.*
C:\Windows\assembly\GAC_64\Policy.6.0.Microsoft.Ink\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\PresentationCore\*.*
C:\Windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\System.Data\*.*
C:\Windows\assembly\GAC_64\System.Data\2.0.0.0__b77a5c561934e089\*.*
C:\Windows\assembly\GAC_64\System.Data.OracleClient\*.*
C:\Windows\assembly\GAC_64\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\*.*
C:\Windows\assembly\GAC_64\System.EnterpriseServices\*.*
C:\Windows\assembly\GAC_64\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_64\System.Printing\*.*
C:\Windows\assembly\GAC_64\System.Printing\3.0.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_64\System.Transactions\*.*
C:\Windows\assembly\GAC_64\System.Transactions\2.0.0.0__b77a5c561934e089\*.*
C:\Windows\assembly\GAC_64\System.Web\*.*
C:\Windows\assembly\GAC_64\System.Web\2.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_MSIL\*.*
C:\Windows\assembly\GAC_MSIL\Accessibility\*.*
C:\Windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_MSIL\ComSvcConfig\*.*
C:\Windows\assembly\GAC_MSIL\ComSvcConfig\3.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_MSIL\ComSvcConfig\3.0.0.0__b03f5f7f11d50a3a\ComSvcConfig.exe
C:\Windows\assembly\GAC_MSIL\ComSvcConfig
C:\Windows\assembly\GAC_MSIL\ComSvcConfig\3.0.0.0__b03f5f7f11d50a3a
C:\Windows\assembly\GAC_MSIL\cscompmgd\*.*
C:\Windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_MSIL\dfsvc\*.*
C:\Windows\assembly\GAC_MSIL\dfsvc\2.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_MSIL\dfsvc\2.0.0.0__b03f5f7f11d50a3a\dfsvc.exe
C:\Windows\assembly\GAC_MSIL\dfsvc\2.0.0.0__b03f5f7f11d50a3a
C:\Windows\assembly\GAC_MSIL\ehCIR\*.*
C:\Windows\assembly\GAC_MSIL\ehCIR\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\ehexthost\*.*
C:\Windows\assembly\GAC_MSIL\ehexthost\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\ehexthost\6.1.0.0__31bf3856ad364e35\ehexthost.exe
C:\Windows\assembly\GAC_MSIL\ehexthost
C:\Windows\assembly\GAC_MSIL\ehexthost\6.1.0.0__31bf3856ad364e35
C:\Windows\assembly\GAC_MSIL\ehiActivScp\*.*
C:\Windows\assembly\GAC_MSIL\ehiActivScp\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\ehiBmlDataCarousel\*.*
C:\Windows\assembly\GAC_MSIL\ehiBmlDataCarousel\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\ehiExtens\*.*
C:\Windows\assembly\GAC_MSIL\ehiExtens\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\ehiiTV\*.*
C:\Windows\assembly\GAC_MSIL\ehiiTV\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\ehiProxy\*.*
C:\Windows\assembly\GAC_MSIL\ehiProxy\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\ehiTVMSMusic\*.*
C:\Windows\assembly\GAC_MSIL\ehiTVMSMusic\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\ehiUPnP\*.*
C:\Windows\assembly\GAC_MSIL\ehiUPnP\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\ehiUserXp\*.*
C:\Windows\assembly\GAC_MSIL\ehiUserXp\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\ehiVidCtl\*.*
C:\Windows\assembly\GAC_MSIL\ehiVidCtl\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\ehiwmp\*.*
C:\Windows\assembly\GAC_MSIL\ehiwmp\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\ehiWUapi\*.*
C:\Windows\assembly\GAC_MSIL\ehiWUapi\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\ehRecObj\*.*
C:\Windows\assembly\GAC_MSIL\ehRecObj\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\ehshell\*.*
C:\Windows\assembly\GAC_MSIL\ehshell\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\EventViewer\*.*
C:\Windows\assembly\GAC_MSIL\EventViewer\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\EventViewer.Resources\*.*
C:\Windows\assembly\GAC_MSIL\EventViewer.Resources\6.1.0.0_en_31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\IEExecRemote\*.*
C:\Windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_MSIL\IEHost\*.*
C:\Windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_MSIL\IIEHost\*.*
C:\Windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\*.*
C:\Windows\assembly\GAC_MSIL\ipdmctrl\*.*
C:\Windows\assembly\GAC_MSIL\ipdmctrl\11.0.0.0__71e9bce111e9429c\*.*
C:\Windows\assembly\GAC_MSIL\loadmxf\*.*
C:\Windows\assembly\GAC_MSIL\loadmxf\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\loadmxf\6.1.0.0__31bf3856ad364e35\loadmxf.exe
C:\Windows\assembly\GAC_MSIL\loadmxf\6.1.0.0__31bf3856ad364e35
C:\Windows\assembly\GAC_MSIL\mcepg\*.*
C:\Windows\assembly\GAC_MSIL\mcepg\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\MCESidebarCtrl\*.*
C:\Windows\assembly\GAC_MSIL\MCESidebarCtrl\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\mcglidhostobj\*.*
C:\Windows\assembly\GAC_MSIL\mcglidhostobj\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\mcplayerinterop\*.*
C:\Windows\assembly\GAC_MSIL\mcplayerinterop\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\mcstore\*.*
C:\Windows\assembly\GAC_MSIL\mcstore\6.1.0.0__31bf3856ad364e35\*.*
C:\Windows\assembly\GAC_MSIL\Microsoft.ApplicationId.Framework\*.*
C:\Windows\assembly\