Trojan.Encoder.32694

Technical Information

To ensure autorun and distribution

Creates the following files on removable media

<Drive name for removable media>:\gruenspecht_02172016.pptx
<Drive name for removable media>:\roozenedowebinar.pptx
<Drive name for removable media>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx
<Drive name for removable media>:\stoc13_ml_quoc_le.pptx
<Drive name for removable media>:\samieee_obiee_presentation.pptx

Malicious functions

Reads files which store third party applications passwords

%HOMEPATH%\desktop\508softwareandos.doc
%HOMEPATH%\desktop\applicantform_en.doc
%HOMEPATH%\desktop\dashborder_120.bmp
%HOMEPATH%\desktop\dial.bmp
%HOMEPATH%\desktop\february_catalogue__2015.doc
%HOMEPATH%\desktop\fi51.doc
%HOMEPATH%\desktop\file_p_00000000_1371597592.docx
%HOMEPATH%\desktop\lisp_success.doc
%HOMEPATH%\desktop\toolbar.bmp

Modifies file system

Creates the following files

<Current directory>\1.bmp
<Current directory>\@please_read_me@.txt

Deletes the following files

<Current directory>\1.bmp

Moves the following system files

from %WINDIR%\ntbtlog.txt to %WINDIR%\ntbtlog.txt.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\webadminhelp_internals.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\webadminhelp_internals.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\webadminhelp_application.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\webadminhelp_application.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\webadminhelp.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\webadminhelp.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\home2.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\home2.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\home1.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\home1.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\home0.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\home0.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\error.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\error.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\default.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\default.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\thirdpartynotices.txt to %WINDIR%\microsoft.net\framework64\v4.0.30319\thirdpartynotices.txt.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\config\defaultwsdlhelpgenerator.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\config\defaultwsdlhelpgenerator.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\wizard\wizard.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\wizard\wizard.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\users\manageusers.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\users\manageusers.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\users\findusers.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\users\findusers.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\users\edituser.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\users\edituser.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\app_code\applicationconfigurationpage.cs to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\app_code\applicationconfigurationpage.cs.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\users\adduser.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\users\adduser.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\roles\manageallroles.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\roles\manageallroles.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\permissions\managepermissions.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\permissions\managepermissions.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\permissions\createpermission.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\permissions\createpermission.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\setupauthentication.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\setupauthentication.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\security0.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\security0.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\security.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\security.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\providers\manageproviders.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\providers\manageproviders.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\providers\manageconsolidatedproviders.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\providers\manageconsolidatedproviders.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\providers\chooseprovidermanagement.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\providers\chooseprovidermanagement.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\app_code\wizardpage.cs to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\app_code\wizardpage.cs.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\app_code\webadminpage.cs to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\app_code\webadminpage.cs.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\app_code\securitypage.cs to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\app_code\securitypage.cs.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\app_code\providerspage.cs to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\app_code\providerspage.cs.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\app_code\passwordvaluetextbox.cs to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\app_code\passwordvaluetextbox.cs.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\roles\managesinglerole.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\security\roles\managesinglerole.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\app_code\navigationbar.cs to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\app_code\navigationbar.cs.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\webadminhelp_provider.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\webadminhelp_provider.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\providers\manageconsolidatedproviders.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\providers\manageconsolidatedproviders.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\security.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\security.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\security0.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\security0.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\setupauthentication.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\setupauthentication.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\permissions\createpermission.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\permissions\createpermission.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\permissions\managepermissions.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\permissions\managepermissions.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\roles\manageallroles.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\roles\manageallroles.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\users\adduser.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\users\adduser.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\permissions\createpermission.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\permissions\createpermission.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\users\edituser.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\users\edituser.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\users\findusers.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\users\findusers.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\users\manageusers.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\users\manageusers.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\wizard\wizard.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\wizard\wizard.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\config\defaultwsdlhelpgenerator.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\config\defaultwsdlhelpgenerator.aspx.wannacry
from <SYSTEM32>\catroot2\dberr.txt to <SYSTEM32>\catroot2\dberr.txt.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\appconfig\appconfighome.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\appconfig\appconfighome.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\webadminhelp_security.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\webadminhelp_security.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\providers\chooseprovidermanagement.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\providers\chooseprovidermanagement.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\app_code\wizardpage.cs to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\app_code\wizardpage.cs.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\app_code\webadminpage.cs to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\app_code\webadminpage.cs.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\app_code\securitypage.cs to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\app_code\securitypage.cs.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\app_code\providerspage.cs to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\app_code\providerspage.cs.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\app_code\passwordvaluetextbox.cs to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\app_code\passwordvaluetextbox.cs.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\app_code\navigationbar.cs to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\app_code\navigationbar.cs.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\app_code\applicationconfigurationpage.cs to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\app_code\applicationconfigurationpage.cs.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\appconfig\smtpsettings.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\appconfig\smtpsettings.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\appconfig\manageappsettings.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\appconfig\manageappsettings.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\appconfig\editappsetting.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\appconfig\editappsetting.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\appconfig\defineerrorpage.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\appconfig\defineerrorpage.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\appconfig\debugandtrace.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\appconfig\debugandtrace.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\appconfig\createappsetting.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\appconfig\createappsetting.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\providers\manageproviders.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\providers\manageproviders.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\appconfig\smtpsettings.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\appconfig\smtpsettings.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\appconfig\manageappsettings.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\appconfig\manageappsettings.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\appconfig\editappsetting.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\appconfig\editappsetting.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\app_code\applicationconfigurationpage.cs to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\app_code\applicationconfigurationpage.cs.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\appconfig\smtpsettings.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\appconfig\smtpsettings.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\appconfig\manageappsettings.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\appconfig\manageappsettings.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\appconfig\editappsetting.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\appconfig\editappsetting.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\appconfig\defineerrorpage.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\appconfig\defineerrorpage.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\appconfig\debugandtrace.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\appconfig\debugandtrace.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\appconfig\createappsetting.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\appconfig\createappsetting.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\appconfig\appconfighome.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\appconfig\appconfighome.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\webadminhelp_security.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\webadminhelp_security.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\webadminhelp_provider.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\webadminhelp_provider.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\webadminhelp_internals.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\webadminhelp_internals.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\webadminhelp_application.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\webadminhelp_application.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\webadminhelp.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\webadminhelp.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\app_code\passwordvaluetextbox.cs to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\app_code\passwordvaluetextbox.cs.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\home2.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\home2.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\home0.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\home0.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\error.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\error.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\default.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\default.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\thirdpartynotices.txt to %WINDIR%\microsoft.net\framework\v4.0.30319\thirdpartynotices.txt.wannacry
from %WINDIR%\microsoft.net\framework\v2.0.50727\config\defaultwsdlhelpgenerator.aspx to %WINDIR%\microsoft.net\framework\v2.0.50727\config\defaultwsdlhelpgenerator.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v2.0.50727\asp.netwebadminfiles\webadminhelp_security.aspx to %WINDIR%\microsoft.net\framework\v2.0.50727\asp.netwebadminfiles\webadminhelp_security.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v2.0.50727\asp.netwebadminfiles\webadminhelp_provider.aspx to %WINDIR%\microsoft.net\framework\v2.0.50727\asp.netwebadminfiles\webadminhelp_provider.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v2.0.50727\asp.netwebadminfiles\webadminhelp_internals.aspx to %WINDIR%\microsoft.net\framework\v2.0.50727\asp.netwebadminfiles\webadminhelp_internals.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v2.0.50727\asp.netwebadminfiles\webadminhelp_application.aspx to %WINDIR%\microsoft.net\framework\v2.0.50727\asp.netwebadminfiles\webadminhelp_application.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v2.0.50727\asp.netwebadminfiles\webadminhelp.aspx to %WINDIR%\microsoft.net\framework\v2.0.50727\asp.netwebadminfiles\webadminhelp.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v1.1.4322\config\defaultwsdlhelpgenerator.aspx to %WINDIR%\microsoft.net\framework\v1.1.4322\config\defaultwsdlhelpgenerator.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v1.1.4322\1033\setupenu2.txt to %WINDIR%\microsoft.net\framework\v1.1.4322\1033\setupenu2.txt.wannacry
from %WINDIR%\microsoft.net\framework\v1.1.4322\1033\setupenu1.txt to %WINDIR%\microsoft.net\framework\v1.1.4322\1033\setupenu1.txt.wannacry
from %WINDIR%\ocsetup_cbs_uninstall_searchengine-client-package.txt to %WINDIR%\ocsetup_cbs_uninstall_searchengine-client-package.txt.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\home1.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\home1.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\app_code\providerspage.cs to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\app_code\providerspage.cs.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\app_code\navigationbar.cs to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\app_code\navigationbar.cs.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\app_code\securitypage.cs to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\app_code\securitypage.cs.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\appconfig\defineerrorpage.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\appconfig\defineerrorpage.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\wizard\wizard.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\wizard\wizard.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\appconfig\debugandtrace.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\appconfig\debugandtrace.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\appconfig\createappsetting.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\appconfig\createappsetting.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\appconfig\appconfighome.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\appconfig\appconfighome.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\webadminhelp_security.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\webadminhelp_security.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\webadminhelp_provider.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\webadminhelp_provider.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\webadminhelp_internals.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\webadminhelp_internals.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\webadminhelp_application.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\webadminhelp_application.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\webadminhelp.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\webadminhelp.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\home2.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\home2.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\home1.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\home1.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\home0.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\home0.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\error.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\error.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\default.aspx to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\default.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\config\defaultwsdlhelpgenerator.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\config\defaultwsdlhelpgenerator.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\users\manageusers.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\users\manageusers.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\app_code\webadminpage.cs to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\app_code\webadminpage.cs.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\users\findusers.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\users\findusers.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\users\edituser.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\users\edituser.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\users\adduser.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\users\adduser.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\roles\managesinglerole.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\roles\managesinglerole.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\roles\manageallroles.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\roles\manageallroles.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\permissions\managepermissions.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\permissions\managepermissions.aspx.wannacry
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\roles\managesinglerole.aspx to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\security\roles\managesinglerole.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\setupauthentication.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\setupauthentication.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\security0.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\security0.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\security.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\security\security.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\providers\manageproviders.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\providers\manageproviders.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\providers\manageconsolidatedproviders.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\providers\manageconsolidatedproviders.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\providers\chooseprovidermanagement.aspx to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\providers\chooseprovidermanagement.aspx.wannacry
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\app_code\wizardpage.cs to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\app_code\wizardpage.cs.wannacry
from %WINDIR%\temp\fxsapidebuglogfile.txt to %WINDIR%\temp\fxsapidebuglogfile.txt.wannacry
from %WINDIR%\temp\fxstiffdebuglogfile.txt to %WINDIR%\temp\fxstiffdebuglogfile.txt.wannacry

Moves the following files

from %ProgramFiles%\java\jre1.8.0_45\readme.txt to %ProgramFiles%\java\jre1.8.0_45\readme.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_danish.txt to %ProgramFiles(x86)%\steam\public\steamui_danish.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_dutch.txt to %ProgramFiles(x86)%\steam\public\steamui_dutch.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_english.txt to %ProgramFiles(x86)%\steam\public\steamui_english.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_finnish.txt to %ProgramFiles(x86)%\steam\public\steamui_finnish.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_french.txt to %ProgramFiles(x86)%\steam\public\steamui_french.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_german.txt to %ProgramFiles(x86)%\steam\public\steamui_german.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_greek.txt to %ProgramFiles(x86)%\steam\public\steamui_greek.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_hungarian.txt to %ProgramFiles(x86)%\steam\public\steamui_hungarian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_italian.txt to %ProgramFiles(x86)%\steam\public\steamui_italian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_korean.txt to %ProgramFiles(x86)%\steam\public\steamui_korean.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_swedish.txt to %ProgramFiles(x86)%\steam\public\steamui_swedish.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_koreana.txt to %ProgramFiles(x86)%\steam\public\steamui_koreana.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_norwegian.txt to %ProgramFiles(x86)%\steam\public\steamui_norwegian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_polish.txt to %ProgramFiles(x86)%\steam\public\steamui_polish.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_portuguese.txt to %ProgramFiles(x86)%\steam\public\steamui_portuguese.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_postlogon_greek.txt to %ProgramFiles(x86)%\steam\public\steamui_postlogon_greek.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_romanian.txt to %ProgramFiles(x86)%\steam\public\steamui_romanian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_russian.txt to %ProgramFiles(x86)%\steam\public\steamui_russian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_schinese.txt to %ProgramFiles(x86)%\steam\public\steamui_schinese.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_spanish.txt to %ProgramFiles(x86)%\steam\public\steamui_spanish.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_czech.txt to %ProgramFiles(x86)%\steam\public\steamui_czech.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_japanese.txt to %ProgramFiles(x86)%\steam\public\steamui_japanese.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_bulgarian.txt to %ProgramFiles(x86)%\steam\public\steamui_bulgarian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_norwegian.txt to %ProgramFiles(x86)%\steam\public\steamclean_norwegian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_english.txt to %ProgramFiles(x86)%\steam\public\steamclean_english.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_finnish.txt to %ProgramFiles(x86)%\steam\public\steamclean_finnish.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_french.txt to %ProgramFiles(x86)%\steam\public\steamclean_french.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_german.txt to %ProgramFiles(x86)%\steam\public\steamclean_german.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_greek.txt to %ProgramFiles(x86)%\steam\public\steamclean_greek.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_hungarian.txt to %ProgramFiles(x86)%\steam\public\steamclean_hungarian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_italian.txt to %ProgramFiles(x86)%\steam\public\steamclean_italian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_japanese.txt to %ProgramFiles(x86)%\steam\public\steamclean_japanese.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_korean.txt to %ProgramFiles(x86)%\steam\public\steamclean_korean.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_polish.txt to %ProgramFiles(x86)%\steam\public\steamclean_polish.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_ukrainian.txt to %ProgramFiles(x86)%\steam\public\steamclean_ukrainian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_portuguese.txt to %ProgramFiles(x86)%\steam\public\steamclean_portuguese.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_romanian.txt to %ProgramFiles(x86)%\steam\public\steamclean_romanian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_russian.txt to %ProgramFiles(x86)%\steam\public\steamclean_russian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_schinese.txt to %ProgramFiles(x86)%\steam\public\steamclean_schinese.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_spanish.txt to %ProgramFiles(x86)%\steam\public\steamclean_spanish.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_swedish.txt to %ProgramFiles(x86)%\steam\public\steamclean_swedish.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_tchinese.txt to %ProgramFiles(x86)%\steam\public\steamclean_tchinese.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_thai.txt to %ProgramFiles(x86)%\steam\public\steamclean_thai.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_turkish.txt to %ProgramFiles(x86)%\steam\public\steamclean_turkish.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_brazilian.txt to %ProgramFiles(x86)%\steam\public\steamui_brazilian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_tchinese.txt to %ProgramFiles(x86)%\steam\public\steamui_tchinese.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_thai.txt to %ProgramFiles(x86)%\steam\public\steamui_thai.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_turkish.txt to %ProgramFiles(x86)%\steam\public\steamui_turkish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_tchinese.txt to %ProgramFiles(x86)%\steam\resource\overlay_tchinese.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_thai.txt to %ProgramFiles(x86)%\steam\resource\overlay_thai.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_turkish.txt to %ProgramFiles(x86)%\steam\resource\overlay_turkish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_ukrainian.txt to %ProgramFiles(x86)%\steam\resource\overlay_ukrainian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_brazilian.txt to %ProgramFiles(x86)%\steam\resource\platform_brazilian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_bulgarian.txt to %ProgramFiles(x86)%\steam\resource\platform_bulgarian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_czech.txt to %ProgramFiles(x86)%\steam\resource\platform_czech.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_danish.txt to %ProgramFiles(x86)%\steam\resource\platform_danish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_spanish.txt to %ProgramFiles(x86)%\steam\resource\overlay_spanish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_swedish.txt to %ProgramFiles(x86)%\steam\resource\overlay_swedish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_dutch.txt to %ProgramFiles(x86)%\steam\resource\platform_dutch.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_french.txt to %ProgramFiles(x86)%\steam\resource\platform_french.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_german.txt to %ProgramFiles(x86)%\steam\resource\platform_german.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_greek.txt to %ProgramFiles(x86)%\steam\resource\platform_greek.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_hungarian.txt to %ProgramFiles(x86)%\steam\resource\platform_hungarian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_italian.txt to %ProgramFiles(x86)%\steam\resource\platform_italian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_japanese.txt to %ProgramFiles(x86)%\steam\resource\platform_japanese.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_korean.txt to %ProgramFiles(x86)%\steam\resource\platform_korean.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_koreana.txt to %ProgramFiles(x86)%\steam\resource\platform_koreana.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_english.txt to %ProgramFiles(x86)%\steam\resource\platform_english.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_finnish.txt to %ProgramFiles(x86)%\steam\resource\platform_finnish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_schinese.txt to %ProgramFiles(x86)%\steam\resource\overlay_schinese.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_russian.txt to %ProgramFiles(x86)%\steam\resource\overlay_russian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_romanian.txt to %ProgramFiles(x86)%\steam\resource\overlay_romanian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\url_list.txt to %ProgramFiles(x86)%\steam\public\url_list.txt.wannacry
from %ProgramFiles(x86)%\steam\remoteui\static\libs\license.txt to %ProgramFiles(x86)%\steam\remoteui\static\libs\license.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_brazilian.txt to %ProgramFiles(x86)%\steam\resource\overlay_brazilian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_bulgarian.txt to %ProgramFiles(x86)%\steam\resource\overlay_bulgarian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_czech.txt to %ProgramFiles(x86)%\steam\resource\overlay_czech.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_danish.txt to %ProgramFiles(x86)%\steam\resource\overlay_danish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_dutch.txt to %ProgramFiles(x86)%\steam\resource\overlay_dutch.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_english.txt to %ProgramFiles(x86)%\steam\resource\overlay_english.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_finnish.txt to %ProgramFiles(x86)%\steam\resource\overlay_finnish.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamui_ukrainian.txt to %ProgramFiles(x86)%\steam\public\steamui_ukrainian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_french.txt to %ProgramFiles(x86)%\steam\resource\overlay_french.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_greek.txt to %ProgramFiles(x86)%\steam\resource\overlay_greek.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_hungarian.txt to %ProgramFiles(x86)%\steam\resource\overlay_hungarian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_italian.txt to %ProgramFiles(x86)%\steam\resource\overlay_italian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_japanese.txt to %ProgramFiles(x86)%\steam\resource\overlay_japanese.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_korean.txt to %ProgramFiles(x86)%\steam\resource\overlay_korean.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_koreana.txt to %ProgramFiles(x86)%\steam\resource\overlay_koreana.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_norwegian.txt to %ProgramFiles(x86)%\steam\resource\overlay_norwegian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_polish.txt to %ProgramFiles(x86)%\steam\resource\overlay_polish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_portuguese.txt to %ProgramFiles(x86)%\steam\resource\overlay_portuguese.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\overlay_german.txt to %ProgramFiles(x86)%\steam\resource\overlay_german.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_dutch.txt to %ProgramFiles(x86)%\steam\public\steamclean_dutch.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_norwegian.txt to %ProgramFiles(x86)%\steam\resource\platform_norwegian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_danish.txt to %ProgramFiles(x86)%\steam\public\steamclean_danish.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_brazilian.txt to %ProgramFiles(x86)%\steam\public\steamclean_brazilian.txt.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\settingsinternal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\settingsinternal.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\splashscreen.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\splashscreen.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\text.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\text.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\usercontrol.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\usercontrol.zip.wannacry
from %ProgramFiles(x86)%\microsoft.net\sdk\v1.1\license.txt to %ProgramFiles(x86)%\microsoft.net\sdk\v1.1\license.txt.wannacry
from %ProgramFiles(x86)%\microsoft.net\sdk\v1.1\redist.txt to %ProgramFiles(x86)%\microsoft.net\sdk\v1.1\redist.txt.wannacry
from %ProgramFiles(x86)%\microsoft.net\sdk\v1.1\include\corhlpr.cpp to %ProgramFiles(x86)%\microsoft.net\sdk\v1.1\include\corhlpr.cpp.wannacry
from %ProgramFiles(x86)%\mirc\readme.txt to %ProgramFiles(x86)%\mirc\readme.txt.wannacry
from %ProgramFiles(x86)%\mirc\versions.txt to %ProgramFiles(x86)%\mirc\versions.txt.wannacry
from %ProgramFiles(x86)%\qip 2012\smilies\qip smilies\copyright(eng).txt to %ProgramFiles(x86)%\qip 2012\smilies\qip smilies\copyright(eng).txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_german.txt to %ProgramFiles(x86)%\steam\friends\trackerui_german.txt.wannacry
from %ProgramFiles(x86)%\qip 2012\smilies\qip smilies\copyright.txt to %ProgramFiles(x86)%\qip 2012\smilies\qip smilies\copyright.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_brazilian.txt to %ProgramFiles(x86)%\steam\friends\trackerui_brazilian.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_bulgarian.txt to %ProgramFiles(x86)%\steam\friends\trackerui_bulgarian.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_czech.txt to %ProgramFiles(x86)%\steam\friends\trackerui_czech.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_danish.txt to %ProgramFiles(x86)%\steam\friends\trackerui_danish.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_dutch.txt to %ProgramFiles(x86)%\steam\friends\trackerui_dutch.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_english.txt to %ProgramFiles(x86)%\steam\friends\trackerui_english.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_finnish.txt to %ProgramFiles(x86)%\steam\friends\trackerui_finnish.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_french.txt to %ProgramFiles(x86)%\steam\friends\trackerui_french.txt.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\resourceinternal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\resourceinternal.zip.wannacry
from %ProgramFiles(x86)%\opera\29.0.1795.47\resources\license.txt to %ProgramFiles(x86)%\opera\29.0.1795.47\resources\license.txt.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\module.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\module.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\usercontrol.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\usercontrol.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\emptydatabase.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\emptydatabase.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\form.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\form.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\interface.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\interface.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\mdiparent.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\mdiparent.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\resource.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\resource.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\resourceinternal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\resourceinternal.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\settings.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\settings.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\settingsinternal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\settingsinternal.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\textfile.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\textfile.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\visualizer.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\visualizer.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\loginform.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\loginform.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\xmlfile.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\xmlfile.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\appconfigurationinternal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\appconfigurationinternal.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\assemblyinfointernal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\assemblyinfointernal.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\class.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\class.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\dataset.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\dataset.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\dialog.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\dialog.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\emptydatabase.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\emptydatabase.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\explorer.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\explorer.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\form.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\form.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\mdiparent.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\mdiparent.zip.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_greek.txt to %ProgramFiles(x86)%\steam\friends\trackerui_greek.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_hungarian.txt to %ProgramFiles(x86)%\steam\friends\trackerui_hungarian.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_italian.txt to %ProgramFiles(x86)%\steam\friends\trackerui_italian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_german.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_german.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_greek.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_greek.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_hungarian.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_hungarian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_italian.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_italian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_japanese.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_japanese.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_korean.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_korean.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_koreana.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_koreana.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_norwegian.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_norwegian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_finnish.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_finnish.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_french.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_french.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_polish.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_polish.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_russian.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_russian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_schinese.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_schinese.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_spanish.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_spanish.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_swedish.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_swedish.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_tchinese.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_tchinese.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_thai.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_thai.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_turkish.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_turkish.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_ukrainian.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_ukrainian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_portuguese.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_portuguese.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_romanian.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_romanian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_english.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_english.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_dutch.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_dutch.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_danish.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_danish.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_korean.txt to %ProgramFiles(x86)%\steam\friends\trackerui_korean.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_koreana.txt to %ProgramFiles(x86)%\steam\friends\trackerui_koreana.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_norwegian.txt to %ProgramFiles(x86)%\steam\friends\trackerui_norwegian.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_polish.txt to %ProgramFiles(x86)%\steam\friends\trackerui_polish.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_portuguese.txt to %ProgramFiles(x86)%\steam\friends\trackerui_portuguese.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_romanian.txt to %ProgramFiles(x86)%\steam\friends\trackerui_romanian.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_russian.txt to %ProgramFiles(x86)%\steam\friends\trackerui_russian.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_schinese.txt to %ProgramFiles(x86)%\steam\friends\trackerui_schinese.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_spanish.txt to %ProgramFiles(x86)%\steam\friends\trackerui_spanish.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_japanese.txt to %ProgramFiles(x86)%\steam\friends\trackerui_japanese.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_swedish.txt to %ProgramFiles(x86)%\steam\friends\trackerui_swedish.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_thai.txt to %ProgramFiles(x86)%\steam\friends\trackerui_thai.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_turkish.txt to %ProgramFiles(x86)%\steam\friends\trackerui_turkish.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_ukrainian.txt to %ProgramFiles(x86)%\steam\friends\trackerui_ukrainian.txt.wannacry
from %ProgramFiles(x86)%\steam\logs\bootstrap_log.txt to %ProgramFiles(x86)%\steam\logs\bootstrap_log.txt.wannacry
from %ProgramFiles(x86)%\steam\logs\configstore_log.txt to %ProgramFiles(x86)%\steam\logs\configstore_log.txt.wannacry
from %ProgramFiles(x86)%\steam\logs\connection_log.txt to %ProgramFiles(x86)%\steam\logs\connection_log.txt.wannacry
from %ProgramFiles(x86)%\steam\logs\content_log.txt to %ProgramFiles(x86)%\steam\logs\content_log.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_brazilian.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_brazilian.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steambootstrapper_czech.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_czech.txt.wannacry
from %ProgramFiles(x86)%\steam\friends\trackerui_tchinese.txt to %ProgramFiles(x86)%\steam\friends\trackerui_tchinese.txt.wannacry
from %ProgramFiles(x86)%\steam\public\steamclean_czech.txt to %ProgramFiles(x86)%\steam\public\steamclean_czech.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_polish.txt to %ProgramFiles(x86)%\steam\resource\platform_polish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_portuguese.txt to %ProgramFiles(x86)%\steam\resource\platform_portuguese.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_romanian.txt to %ProgramFiles(x86)%\steam\resource\platform_romanian.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_brazilian.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_brazilian.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_bulgarian.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_bulgarian.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_czech.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_czech.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_danish.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_danish.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_dutch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_dutch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_english.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_english.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_finnish.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_finnish.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_french.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_french.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_turkish_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_turkish_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_ukrainian_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_ukrainian_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_german.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_german.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_italian.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_italian.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_japanese.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_japanese.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_korean.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_korean.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_koreana.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_koreana.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_norwegian.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_norwegian.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_polish.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_polish.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_portuguese.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_portuguese.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_romanian.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_romanian.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_greek.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_greek.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_hungarian.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_hungarian.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_schinese.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_schinese.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_russian.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_russian.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_spanish_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_spanish_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_finnish_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_finnish_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_french_default.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_french_default.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_french_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_french_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_german_default.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_german_default.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_german_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_german_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_hungarian_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_hungarian_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_italian_default.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_italian_default.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_swedish_default.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_swedish_default.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_english_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_english_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_swedish_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_swedish_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_italian_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_italian_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_polish_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_polish_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_portuguese_default.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_portuguese_default.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_portuguese_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_portuguese_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_romanian_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_romanian_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_russian_default.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_russian_default.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_russian_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_russian_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_spanish_default.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_spanish_default.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_norwegian_default.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_norwegian_default.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_norwegian_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_norwegian_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_polish_default.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_polish_default.txt.wannacry
from %APPDATA%\opera software\opera stable\opera_shutdown_ms.txt to %APPDATA%\opera software\opera stable\opera_shutdown_ms.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_spanish.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_spanish.txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@c.bing[1].txt to %APPDATA%\microsoft\windows\cookies\user@c.bing[1].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@c.msn[1].txt to %APPDATA%\microsoft\windows\cookies\user@c.msn[1].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@c.msn[2].txt to %APPDATA%\microsoft\windows\cookies\user@c.msn[2].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@demdex[2].txt to %APPDATA%\microsoft\windows\cookies\user@demdex[2].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@mozilla[2].txt to %APPDATA%\microsoft\windows\cookies\user@mozilla[2].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@msn[1].txt to %APPDATA%\microsoft\windows\cookies\user@msn[1].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@msn[2].txt to %APPDATA%\microsoft\windows\cookies\user@msn[2].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@onlinestores.metaservices.microsoft[1].txt to %APPDATA%\microsoft\windows\cookies\user@onlinestores.metaservices.microsoft[1].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@bing[2].txt to %APPDATA%\microsoft\windows\cookies\user@bing[2].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@scorecardresearch[2].txt to %APPDATA%\microsoft\windows\cookies\user@scorecardresearch[2].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@c.bing[2].txt to %APPDATA%\microsoft\windows\cookies\user@c.bing[2].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@sportiv[2].txt to %APPDATA%\microsoft\windows\cookies\user@sportiv[2].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@www.msn[2].txt to %APPDATA%\microsoft\windows\cookies\user@www.msn[2].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@www.msn[3].txt to %APPDATA%\microsoft\windows\cookies\user@www.msn[3].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@yandex[1].txt to %APPDATA%\microsoft\windows\cookies\user@yandex[1].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@yandex[2].txt to %APPDATA%\microsoft\windows\cookies\user@yandex[2].txt.wannacry
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\revocations.txt to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\revocations.txt.wannacry
from %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sitesecurityservicestate.txt to %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sitesecurityservicestate.txt.wannacry
from %APPDATA%\mra\update\ver.txt to %APPDATA%\mra\update\ver.txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@scorecardresearch[3].txt to %APPDATA%\microsoft\windows\cookies\user@scorecardresearch[3].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@bing[1].txt to %APPDATA%\microsoft\windows\cookies\user@bing[1].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@www.bing[1].txt to %APPDATA%\microsoft\windows\cookies\user@www.bing[1].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@adobe[3].txt to %APPDATA%\microsoft\windows\cookies\user@adobe[3].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@adobe[1].txt to %APPDATA%\microsoft\windows\cookies\user@adobe[1].txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_tchinese.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_tchinese.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_turkish.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_turkish.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_ukrainian.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_ukrainian.txt.wannacry
from %ProgramFiles(x86)%\winamp\whatsnew.txt to %ProgramFiles(x86)%\winamp\whatsnew.txt.wannacry
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\barcodefont.txt to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\barcodefont.txt.wannacry
from %TEMP%\dd_ndp452-kb2901907-x86-x64-allos-enu_decompression_log.txt to %TEMP%\dd_ndp452-kb2901907-x86-x64-allos-enu_decompression_log.txt.wannacry
from %TEMP%\dd_ndp471-kb4033342-x86-x64-allos-enu_decompression_log.txt to %TEMP%\dd_ndp471-kb4033342-x86-x64-allos-enu_decompression_log.txt.wannacry
from %TEMP%\dd_setuputility.txt to %TEMP%\dd_setuputility.txt.wannacry
from %TEMP%\dd_wcf_ca_smci_20151217_052858_840.txt to %TEMP%\dd_wcf_ca_smci_20151217_052858_840.txt.wannacry
from %TEMP%\dd_wcf_ca_smci_20151217_052908_497.txt to %TEMP%\dd_wcf_ca_smci_20151217_052908_497.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_thai.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_thai.txt.wannacry
from %TEMP%\dd_wcf_ca_smci_20200611_031056_919.txt to %TEMP%\dd_wcf_ca_smci_20200611_031056_919.txt.wannacry
from %TEMP%\microsoft .net framework 4.5.2 setup_20151216_212237215-msi_netfx_full_gdr_x64.msi.txt to %TEMP%\microsoft .net framework 4.5.2 setup_20151216_212237215-msi_netfx_full_gdr_x64.msi.txt.wannacry
from %TEMP%\microsoft .net framework 4.7.1 setup_20200610_200621826-msi_netfx_full_x64.msi.txt to %TEMP%\microsoft .net framework 4.7.1 setup_20200610_200621826-msi_netfx_full_x64.msi.txt.wannacry
from %TEMP%\webinstaller\qnzuposrqouvfisa\data.txt to %TEMP%\webinstaller\qnzuposrqouvfisa\data.txt.wannacry
from %APPDATA%\icq-profile\update\ver.txt to %APPDATA%\icq-profile\update\ver.txt.wannacry
from %APPDATA%\icqm\icq\smiles\skin.txt to %APPDATA%\icqm\icq\smiles\skin.txt.wannacry
from %APPDATA%\mail.ru\agent\mra\smiles\skin.txt to %APPDATA%\mail.ru\agent\mra\smiles\skin.txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@246059135.log.optimizely[1].txt to %APPDATA%\microsoft\windows\cookies\user@246059135.log.optimizely[1].txt.wannacry
from %APPDATA%\microsoft\windows\cookies\user@adnxs[1].txt to %APPDATA%\microsoft\windows\cookies\user@adnxs[1].txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_english_default.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_english_default.txt.wannacry
from %TEMP%\dd_wcf_ca_smci_20200611_031101_060.txt to %TEMP%\dd_wcf_ca_smci_20200611_031101_060.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_finnish_default.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_finnish_default.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_dutch_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_dutch_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_dutch_default.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_dutch_default.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_danish_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_danish_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_russian.txt to %ProgramFiles(x86)%\steam\resource\vgui_russian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_schinese.txt to %ProgramFiles(x86)%\steam\resource\vgui_schinese.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_spanish.txt to %ProgramFiles(x86)%\steam\resource\vgui_spanish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_swedish.txt to %ProgramFiles(x86)%\steam\resource\vgui_swedish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_tchinese.txt to %ProgramFiles(x86)%\steam\resource\vgui_tchinese.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_thai.txt to %ProgramFiles(x86)%\steam\resource\vgui_thai.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_turkish.txt to %ProgramFiles(x86)%\steam\resource\vgui_turkish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_polish.txt to %ProgramFiles(x86)%\steam\resource\vgui_polish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_koreana.txt to %ProgramFiles(x86)%\steam\resource\vgui_koreana.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_romanian.txt to %ProgramFiles(x86)%\steam\resource\vgui_romanian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_ukrainian.txt to %ProgramFiles(x86)%\steam\resource\vgui_ukrainian.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_danish.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_danish.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_dutch.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_dutch.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_english.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_english.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_finnish.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_finnish.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_french.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_french.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_german.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_german.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_greek.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_greek.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_brazilian.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_brazilian.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_bulgarian.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_bulgarian.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_czech.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_czech.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_norwegian.txt to %ProgramFiles(x86)%\steam\resource\vgui_norwegian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_korean.txt to %ProgramFiles(x86)%\steam\resource\vgui_korean.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_hungarian.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_hungarian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_schinese.txt to %ProgramFiles(x86)%\steam\resource\platform_schinese.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_spanish.txt to %ProgramFiles(x86)%\steam\resource\platform_spanish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_swedish.txt to %ProgramFiles(x86)%\steam\resource\platform_swedish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_tchinese.txt to %ProgramFiles(x86)%\steam\resource\platform_tchinese.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_thai.txt to %ProgramFiles(x86)%\steam\resource\platform_thai.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_turkish.txt to %ProgramFiles(x86)%\steam\resource\platform_turkish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_ukrainian.txt to %ProgramFiles(x86)%\steam\resource\platform_ukrainian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_brazilian.txt to %ProgramFiles(x86)%\steam\resource\vgui_brazilian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_bulgarian.txt to %ProgramFiles(x86)%\steam\resource\vgui_bulgarian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\platform_russian.txt to %ProgramFiles(x86)%\steam\resource\platform_russian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_czech.txt to %ProgramFiles(x86)%\steam\resource\vgui_czech.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_dutch.txt to %ProgramFiles(x86)%\steam\resource\vgui_dutch.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_english.txt to %ProgramFiles(x86)%\steam\resource\vgui_english.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_finnish.txt to %ProgramFiles(x86)%\steam\resource\vgui_finnish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_french.txt to %ProgramFiles(x86)%\steam\resource\vgui_french.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_german.txt to %ProgramFiles(x86)%\steam\resource\vgui_german.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_greek.txt to %ProgramFiles(x86)%\steam\resource\vgui_greek.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_hungarian.txt to %ProgramFiles(x86)%\steam\resource\vgui_hungarian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_italian.txt to %ProgramFiles(x86)%\steam\resource\vgui_italian.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_japanese.txt to %ProgramFiles(x86)%\steam\resource\vgui_japanese.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_danish.txt to %ProgramFiles(x86)%\steam\resource\vgui_danish.txt.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\dataset.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\dataset.zip.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_japanese.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_japanese.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_italian.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_italian.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_norwegian.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_norwegian.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_korean.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_korean.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_koreana.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_koreana.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_norwegian.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_norwegian.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_polish.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_polish.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_portuguese.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_portuguese.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_romanian.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_romanian.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_russian.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_russian.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_hungarian.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_hungarian.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_schinese.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_schinese.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_japanese.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_japanese.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_swedish.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_swedish.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_thai.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_thai.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_turkish.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_turkish.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_ukrainian.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_ukrainian.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\license_cjk.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\license_cjk.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_brazilian_default.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_brazilian_default.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_brazilian_dualtouch.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_brazilian_dualtouch.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_danish_default.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_danish_default.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_spanish.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_spanish.txt.wannacry
from %ProgramFiles(x86)%\steam\resource\vgui_portuguese.txt to %ProgramFiles(x86)%\steam\resource\vgui_portuguese.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_tchinese.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_tchinese.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_italian.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_italian.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_greek.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_greek.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_german.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_german.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_polish.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_polish.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_portuguese.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_portuguese.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_romanian.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_romanian.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_russian.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_russian.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_schinese.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_schinese.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_spanish.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_spanish.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_swedish.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_swedish.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_tchinese.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_tchinese.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_koreana.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_koreana.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_thai.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_thai.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_ukrainian.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_ukrainian.txt.wannacry
from %ProgramFiles(x86)%\steam\skins\skins_readme.txt to %ProgramFiles(x86)%\steam\skins\skins_readme.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_brazilian.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_brazilian.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_bulgarian.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_bulgarian.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_czech.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_czech.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_danish.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_danish.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_dutch.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_dutch.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_english.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_english.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_finnish.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_finnish.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_turkish.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_turkish.txt.wannacry
from %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_french.txt to %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_french.txt.wannacry
from %ProgramFiles(x86)%\steam\servers\serverbrowser_korean.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_korean.txt.wannacry
from %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_swedish.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_swedish.txt.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\codefile.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\codefile.zip.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\watch-tutorials-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\watch-tutorials-2x.png.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\messageboxiconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\messageboxiconimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\messageboxiconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\messageboxiconimagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\unreadicon.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\unreadicon.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\unreadiconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\unreadiconimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\unreadiconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\unreadiconimagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\computers\computericon.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\computers\computericon.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\computers\computericonmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\computers\computericonmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\discussion\discussiontooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\discussion\discussiontooliconimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\discussion\discussiontooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\discussion\discussiontooliconimagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\activetabimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\activetabimage.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsviewattachmenticonsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsviewattachmenticonsmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\activetabimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\activetabimagemask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\bodypanebackground.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\bodypanebackground.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\inactivetabimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\inactivetabimage.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\inactivetabimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\inactivetabimagemask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\markupiconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\markupiconimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\markupiconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\markupiconimagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\addtoviewarrow.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\addtoviewarrow.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\addtoviewarrowmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\addtoviewarrowmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsviewattachmenticons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsviewattachmenticons.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimagesmall.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimagesmall.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\wssfilestoolhomepagebackground.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\wssfilestoolhomepagebackground.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimagemasksmall.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimagemasksmall.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_fileoffmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_fileoffmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_auto.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_auto.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_automask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_automask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contacthigh.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contacthigh.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contacthighmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contacthighmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contactlow.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contactlow.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contactlowmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contactlowmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_filehigh.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_filehigh.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_filehighmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_filehighmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_fileoff.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_fileoff.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_high.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_high.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimage.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_highmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_highmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_medium.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_medium.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_mediummask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_mediummask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_off.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_off.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_offmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_offmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimage.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimagemask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimagemasksmall.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimagemasksmall.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimagesmall.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimagesmall.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimagemask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formtoolimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formtoolimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewheaderpreview.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewheaderpreview.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\attachments.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\attachments.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projectstatusicons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projectstatusicons.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projectstatusiconsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projectstatusiconsmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttaskicon.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttaskicon.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttaskiconmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttaskiconmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttoolseticonimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttoolseticonimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttoolseticonimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttoolseticonimagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\splashimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\splashimage.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\splashimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\splashimagemask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\meetingicon.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\meetingicon.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\meetingiconmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\meetingiconmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\whiteboxmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\whiteboxmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\welcome tool\iconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\welcome tool\iconimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\welcome tool\iconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\welcome tool\iconimagesmask.bmp.wannacry
from %ProgramFiles%\winrar\license.txt to %ProgramFiles%\winrar\license.txt.wannacry
from %ProgramFiles%\winrar\rar.txt to %ProgramFiles%\winrar\rar.txt.wannacry
from %ProgramFiles%\winrar\readme.txt to %ProgramFiles%\winrar\readme.txt.wannacry
from %ProgramFiles%\winrar\whatsnew.txt to %ProgramFiles%\winrar\whatsnew.txt.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\adc_logo.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\adc_logo.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\apple-touch-icon-114x114-precomposed.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\apple-touch-icon-114x114-precomposed.png.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\zoomicons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\zoomicons.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\zoomiconsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\zoomiconsmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\circleiconsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\circleiconsmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\circleicons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\circleicons.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\briefcaseiconmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\briefcaseiconmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\embeddedview.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\embeddedview.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\sectionheading.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\sectionheading.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\statictext.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\statictext.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\unformattednumeric.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\unformattednumeric.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\addtoviewarrow.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\addtoviewarrow.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\addtoviewarrowmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\addtoviewarrowmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsviewattachmenticons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsviewattachmenticons.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsviewattachmenticonsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsviewattachmenticonsmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formtoolimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formtoolimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\digitalink.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\digitalink.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\viewheaderpreview.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\viewheaderpreview.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\addtoviewarrowmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\addtoviewarrowmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsviewattachmenticons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsviewattachmenticons.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsviewattachmenticonsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsviewattachmenticonsmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formtoolimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formtoolimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\viewheaderpreview.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\viewheaderpreview.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsviewattachmenticons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsviewattachmenticons.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsviewattachmenticonsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsviewattachmenticonsmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\infopathwelcomeimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\infopathwelcomeimage.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\briefcaseicon.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\briefcaseicon.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\addtoviewarrow.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\addtoviewarrow.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\globebuttonimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\globebuttonimagemask.bmp.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\apple-touch-icon-144x144-precomposed.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\apple-touch-icon-144x144-precomposed.png.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\globebuttonimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\globebuttonimage.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendartooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendartooliconimagesmask.bmp.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunjce_provider.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunjce_provider.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunmscapi.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunmscapi.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunpkcs11.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunpkcs11.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\security\local_policy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\security\local_policy.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\security\us_export_policy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\security\us_export_policy.jar.wannacry
from %ProgramFiles%\microsoft office\office14\splashscreen.bmp to %ProgramFiles%\microsoft office\office14\splashscreen.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\arrow.png to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\arrow.png.wannacry
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\gradient.png to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\gradient.png.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\calendartooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\calendartooliconimagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\discussiontooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\discussiontooliconimagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\chessiconimages.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\chessiconimages.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\chessiconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\chessiconimagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\createspaceimage.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\createspaceimage.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\createspaceimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\createspaceimagemask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\datalisticonimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\datalisticonimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\datalisticonimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\datalisticonimagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\dataviewiconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\dataviewiconimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\dataviewiconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\dataviewiconimagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\discussiontooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\discussiontooliconimages.jpg.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunec.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunec.jar.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\calendartooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\calendartooliconimages.jpg.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\nashorn.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\nashorn.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\jsse.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jsse.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt.wannacry
from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt.wannacry
from %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt to %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar to %ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\javaws.jar to %ProgramFiles%\java\jre1.8.0_45\lib\javaws.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\jce.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jce.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\jfr.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jfr.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\jfxswt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jfxswt.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt to %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\jfxrt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\jfxrt.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\management-agent.jar to %ProgramFiles%\java\jre1.8.0_45\lib\management-agent.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\plugin.jar to %ProgramFiles%\java\jre1.8.0_45\lib\plugin.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar to %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\rt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\rt.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\access-bridge-64.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\access-bridge-64.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\cldrdata.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\cldrdata.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\dnsns.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\dnsns.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar.wannacry
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\localedata.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\localedata.jar.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\form_statusimage.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\form_statusimage.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\form_statusimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\form_statusimagemask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\informationicon.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\informationicon.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared16x16imagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared16x16imagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared24x24images.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared24x24images.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared24x24imagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared24x24imagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\sketchiconimages.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\sketchiconimages.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\spacebackupicons.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\spacebackupicons.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\spacebackupiconsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\spacebackupiconsmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\stopiconmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\stopiconmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\taskbariconimages256colors.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\taskbariconimages256colors.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\questioniconmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\questioniconmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared16x16images.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared16x16images.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\taskbariconimagesmask256colors.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\taskbariconimagesmask256colors.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\verisignlogo.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\verisignlogo.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtooliconimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtooliconimagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtoolimages16x16.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtoolimages16x16.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtoolimagesmask16x16.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtoolimagesmask16x16.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\wssfilestooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\wssfilestooliconimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\wssfilestooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\wssfilestooliconimagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendartooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendartooliconimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\tipsimage.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\tipsimage.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\tipsimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\tipsimagemask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\questionicon.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\questionicon.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\picturestooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\picturestooliconimagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\picturestooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\picturestooliconimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\logindialogbackground.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\logindialogbackground.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\logintool24x24images.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\logintool24x24images.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\logintool24x24imagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\logintool24x24imagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\messageattachmenticonimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\messageattachmenticonimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\messageattachmenticonimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\messageattachmenticonimagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\messagehistoryiconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\messagehistoryiconimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\messagehistoryiconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\messagehistoryiconimagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierbackground.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierbackground.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierbackgroundrtl.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierbackgroundrtl.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\informationiconmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\informationiconmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierclosebutton.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierclosebutton.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierdisableuparrow.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierdisableuparrow.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierdownarrow.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierdownarrow.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifieruparrow.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifieruparrow.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierwindowmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierwindowmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierwindowmaskrtl.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierwindowmaskrtl.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\outlinetooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\outlinetooliconimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\outlinetooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\outlinetooliconimagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\outofsynciconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\outofsynciconimages.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\outofsynciconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\outofsynciconimagesmask.bmp.wannacry
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierdisabledownarrow.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierdisabledownarrow.jpg.wannacry
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendarviewbuttonimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendarviewbuttonimages.jpg.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\apple-touch-icon-57x57-precomposed.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\apple-touch-icon-57x57-precomposed.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\apple-touch-icon-72x72-precomposed.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\apple-touch-icon-72x72-precomposed.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\ccloud.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\ccloud.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\dropbox-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\dropbox-2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\dropbox.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\dropbox.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\edit-pdf-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\edit-pdf-2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\edit-pdf.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\edit-pdf.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\fill-sign-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\fill-sign-2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\fill-sign.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\fill-sign.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\find-text-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\find-text-2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\find-text.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\find-text.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\connect-your-devices-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\connect-your-devices-2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\connect-your-devices.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\connect-your-devices.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\get-e-signatures-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\get-e-signatures-2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\lets-get-started.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\lets-get-started.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\more-inside-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\more-inside-2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\more-inside.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\more-inside.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\multi-tab-file-view-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\multi-tab-file-view-2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\multi-tab-file-view.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\multi-tab-file-view.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\new-features-have-arrived-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\new-features-have-arrived-2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\new-features-have-arrived.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\new-features-have-arrived.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\organize-pages-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\organize-pages-2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\get-e-signatures.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\get-e-signatures.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\lets-get-started-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\lets-get-started-2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\unified-e-signature-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\unified-e-signature-2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\organize-pages.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\organize-pages.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\illustrations_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\illustrations_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\new_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\new_icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\new_icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\new_icons_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\bg_patterns_header.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\bg_patterns_header.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\bg_pattern_rhp.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\bg_pattern_rhp.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\icons_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\combine-files-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\combine-files-2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\icons_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\combine-files.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\combine-files.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\illustrations.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\illustrations.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\edit_pdf_poster.jpg to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\edit_pdf_poster.jpg.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\edit_pdf_poster2x.jpg to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\edit_pdf_poster2x.jpg.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\example_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\example_icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\example_icons2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\example_icons2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools-2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment-2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\illustrations_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\illustrations_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\new_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\new_icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\new_icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\new_icons_retina.png.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\assemblyinfointernal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\assemblyinfointernal.zip.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\unified-e-signature.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\unified-e-signature.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\symbol.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\symbol.txt.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\zdingbat.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\zdingbat.txt.wannacry
from %ProgramFiles(x86)%\google\chrome\application\42.0.2311.135\secondarytile.png to %ProgramFiles(x86)%\google\chrome\application\42.0.2311.135\secondarytile.png.wannacry
from %ProgramFiles(x86)%\google\chrome\application\42.0.2311.135\installer\chrome.7z to %ProgramFiles(x86)%\google\chrome\application\42.0.2311.135\installer\chrome.7z.wannacry
from %ProgramFiles(x86)%\google\chrome\application\42.0.2311.135\visualelements\logo.png to %ProgramFiles(x86)%\google\chrome\application\42.0.2311.135\visualelements\logo.png.wannacry
from %ProgramFiles(x86)%\google\chrome\application\42.0.2311.135\visualelements\smalllogo.png to %ProgramFiles(x86)%\google\chrome\application\42.0.2311.135\visualelements\smalllogo.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png.wannacry
from %ProgramFiles(x86)%\google\chrome\application\42.0.2311.135\visualelements\splash-620x300.png to %ProgramFiles(x86)%\google\chrome\application\42.0.2311.135\visualelements\splash-620x300.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png.wannacry
from %ProgramFiles(x86)%\k-lite codec pack\filters\ffdshow64\languages\ffdshow.1029.cs to %ProgramFiles(x86)%\k-lite codec pack\filters\ffdshow64\languages\ffdshow.1029.cs.wannacry
from %ProgramFiles(x86)%\k-lite codec pack\icaros\icaros license.txt to %ProgramFiles(x86)%\k-lite codec pack\icaros\icaros license.txt.wannacry
from %ProgramFiles(x86)%\k-lite codec pack\mpc-hc64\toolbar.bmp to %ProgramFiles(x86)%\k-lite codec pack\mpc-hc64\toolbar.bmp.wannacry
from %ProgramFiles(x86)%\k-lite codec pack\tools\xvid_quant_matrices.zip to %ProgramFiles(x86)%\k-lite codec pack\tools\xvid_quant_matrices.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\aboutbox.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\aboutbox.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\appconfig.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\appconfig.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\appconfiginternal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\appconfiginternal.zip.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\assemblyinfo.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\assemblyinfo.zip.wannacry
from %ProgramFiles(x86)%\k-lite codec pack\filters\ffdshow\languages\ffdshow.1029.cs to %ProgramFiles(x86)%\k-lite codec pack\filters\ffdshow\languages\ffdshow.1029.cs.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.wannacry
from %ProgramFiles(x86)%\k-lite codec pack\icaros\ffmpeg license.txt to %ProgramFiles(x86)%\k-lite codec pack\icaros\ffmpeg license.txt.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\watch-tutorials.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\watch-tutorials.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\cloud_secured_lg.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\cloud_secured_lg.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\core_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\core_icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\adc_logo.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\adc_logo.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\core_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\core_icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\core_icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\core_icons_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\download-btn.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\download-btn.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\file_info.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\file_info.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\file_info2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\file_info2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\illustrations.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\illustrations.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\cloud_secured.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\cloud_secured.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\illustrations_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\illustrations_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\new_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\new_icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\email\adc_logo.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\email\adc_logo.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\email\adobe_logo.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\email\adobe_logo.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\email\dummy\adobe-old-logo.jpg to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\email\dummy\adobe-old-logo.jpg.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\email\dummy\fake_logo.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\email\dummy\fake_logo.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\logo_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\logo_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\illustrations.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\illustrations.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\file_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\file_icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\bg_pattern_rhp.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\bg_pattern_rhp.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\bg_patterns_header.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\bg_patterns_header.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons_highcontrast_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons_highcontrast_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons__retina_hicontrast_bow.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons__retina_hicontrast_bow.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons__retina_hicontrast_wob.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons__retina_hicontrast_wob.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\win-scrollbar\arrow-down.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\win-scrollbar\arrow-down.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\win-scrollbar\arrow-left.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\win-scrollbar\arrow-left.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\win-scrollbar\arrow-right.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\win-scrollbar\arrow-right.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\win-scrollbar\arrow-up.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\win-scrollbar\arrow-up.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons_hicontrast_bow.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons_hicontrast_bow.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_retina_thumb_highcontrast_bow.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_retina_thumb_highcontrast_bow.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons_highcontrast.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons_highcontrast.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\win-scrollbar\hscroll-thumb.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\win-scrollbar\hscroll-thumb.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\icons_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\illustrations.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\illustrations.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\illustrations_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\illustrations_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\new_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\new_icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\new_icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\new_icons_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\rhp_world_icon.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\rhp_world_icon.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\win-scrollbar\vscroll-thumb.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\win-scrollbar\vscroll-thumb.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\bg_patterns_header.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\bg_patterns_header.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\bg_pattern_rhp.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\bg_pattern_rhp.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_retina_thumb_highcontrast_wob.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_retina_thumb_highcontrast_wob.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_highcontrast.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_highcontrast.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\rhp_world_icon_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\rhp_world_icon_2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\close_x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\close_x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\core_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\core_icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\core_icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\core_icons_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\dd_arrow_small.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\dd_arrow_small.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\illustrations.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\illustrations.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\illustrations_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\illustrations_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\japanese_over.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\japanese_over.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\large_trefoil.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\large_trefoil.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\large_trefoil_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\large_trefoil_2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\ccloud_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\ccloud_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\logo_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\logo_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\rhp_icons_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\rhp_icons_2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\selection-actions.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\selection-actions.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\selection-actions2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\selection-actions2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\aic_file_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\aic_file_icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\aic_file_icons_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\aic_file_icons_2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\aic_file_icons_retina_thumb.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\aic_file_icons_retina_thumb.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\cloud_icon.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\cloud_icon.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_hicontrast_bow.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_hicontrast_bow.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_hicontrast_wob.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_hicontrast_wob.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\rhp_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\rhp_icons.png.wannacry
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\class.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\class.zip.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\rhp_world_icon_hover_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\rhp_world_icon_hover_2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\rhp_world_icon_hover.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\rhp_world_icon_hover.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\combinepdf\images\example_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\combinepdf\images\example_icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\text_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\text_2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\x_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\x_2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_addblue@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_addblue@1x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_checkmark_white@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_checkmark_white@1x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_crossmark_white@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_crossmark_white@1x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_delete@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_delete@1x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_filleddot_white@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_filleddot_white@1x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\circle_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\circle_2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_line_white@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_line_white@1x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\line_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\line_2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_sign_white@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_sign_white@1x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\comb_field_white@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\comb_field_white@1x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\files_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\files_icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\files_icons2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\files_icons2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\icons_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\new_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\new_icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\new_icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\new_icons_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_roundrect_white@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_roundrect_white@1x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons_hicontrast_wob.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons_hicontrast_wob.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_typetextfields_white@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_typetextfields_white@1x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\dot_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\dot_2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\check_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\check_2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\sample-thumb.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\sample-thumb.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\combinepdf\images\example_icons2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\combinepdf\images\example_icons2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\combinepdf\images\rhp_world_icon.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\combinepdf\images\rhp_world_icon.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\combinepdf\images\rhp_world_icon_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\combinepdf\images\rhp_world_icon_2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\combinepdf\images\rhp_world_icon_hover.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\combinepdf\images\rhp_world_icon_hover.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\combinepdf\images\rhp_world_icon_hover_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\combinepdf\images\rhp_world_icon_hover_2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\editpdf\images\example_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\editpdf\images\example_icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\editpdf\images\example_icons2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\editpdf\images\example_icons2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\editpdf\images\rhp_world_icon.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\editpdf\images\rhp_world_icon.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\warning_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\warning_2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\editpdf\images\rhp_world_icon_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\editpdf\images\rhp_world_icon_2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\editpdf\images\rhp_world_icon_hover_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\editpdf\images\rhp_world_icon_hover_2x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\adobe_sign_tag.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\adobe_sign_tag.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\adobe_sign_tag_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\adobe_sign_tag_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\core_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\core_icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\core_icons_fw.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\core_icons_fw.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\core_icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\core_icons_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\faf_field_grabber.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\faf_field_grabber.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\faf_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\faf_icons.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\faf_icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\faf_icons_retina.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\editpdf\images\rhp_world_icon_hover.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\editpdf\images\rhp_world_icon_hover.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\handler@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\handler@1x.png.wannacry
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\warning.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\warning.png.wannacry
from %APPDATA%\telegram desktop\log.txt to %APPDATA%\telegram desktop\log.txt.wannacry

Modifies user data files (Trojan.Encoder).

Changes user data files extensions (Trojan.Encoder).

Miscellaneous

Searches for the following windows

ClassName: 'SystemTray_Main' WindowName: ''

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial