Trojan.Encoder.37784

Technical Information

To ensure autorun and distribution

Creates the following files on removable media

<Drive name for removable media>:\criticalbreachdetected.pdf

Modifies file system

Creates the following files

C:\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft help\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\cache2\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\cache2\doomed\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\cache2\entries\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\windows sidebar\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\windows sidebar\gadgets\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\offlinecache\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\startupcache\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\thumbnails\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\bcjnbgva.default\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\cache2\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\cache2\doomed\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\cache2\entries\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\offlinecache\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\safebrowsing\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\safebrowsing\google4\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\windows media\12.0\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\windows media\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\windows mail\stationery\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\feeds\microsoft feeds~\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\feeds\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\feeds\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\webslices~\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\feeds cache\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\feeds cache\1zlrvj28\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\feeds cache\5uzys9tz\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\feeds cache\id3ykpjl\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\feeds cache\q2xofo16\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\internet explorer\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\feeds\feeds for united states~\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\media player\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\0003b056\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\office\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\office\groove\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\office\groove\system\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\office\groove\user\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\windows mail\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\windows mail\backup\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\windows mail\backup\new\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\media player\sync playlists\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\safebrowsing\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\startupcache\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\14\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\thumbnails\criticalbreachdetected.pdf
%LOCALAPPDATA%low\mozilla\temp-{10ec5a16-76a1-4966-833c-89c100352a7c}\criticalbreachdetected.pdf
%LOCALAPPDATA%low\mozilla\temp-{6caf41d3-d3bc-4111-be0f-6767486b42d5}\criticalbreachdetected.pdf
%LOCALAPPDATA%low\mozilla\temp-{74a94761-d090-449f-b0e6-cb7d26a06c26}\criticalbreachdetected.pdf
%LOCALAPPDATA%low\mozilla\temp-{9cda0b19-0440-4e70-9631-93e7041926aa}\criticalbreachdetected.pdf
%LOCALAPPDATA%low\mozilla\temp-{c524df81-3d66-47d3-a687-5ed5a39c6588}\criticalbreachdetected.pdf
%LOCALAPPDATA%low\oracle\criticalbreachdetected.pdf
%LOCALAPPDATA%low\oracle\java\criticalbreachdetected.pdf
%LOCALAPPDATA%low\oracle\java\au\criticalbreachdetected.pdf
%LOCALAPPDATA%low\microsoft\internet explorer\services\criticalbreachdetected.pdf
%LOCALAPPDATA%low\mozilla\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\0\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\1\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\10\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\11\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\12\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\13\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\criticalbreachdetected.pdf
%LOCALAPPDATA%low\microsoft\internet explorer\criticalbreachdetected.pdf
%LOCALAPPDATA%low\microsoft\criticalbreachdetected.pdf
%LOCALAPPDATA%low\criticalbreachdetected.pdf
%LOCALAPPDATA%\programs\common\criticalbreachdetected.pdf
%TEMP%\criticalbreachdetected.pdf
%TEMP%\hsperfdata_user\criticalbreachdetected.pdf
%TEMP%\low\criticalbreachdetected.pdf
%TEMP%\microsoft .net framework 4 setup_4.0.30319\criticalbreachdetected.pdf
%TEMP%\microsoft visual c++ 2010 x64 redistributable setup_10.0.30319\criticalbreachdetected.pdf
%TEMP%\microsoft visual c++ 2010 x86 redistributable setup_10.0.30319\criticalbreachdetected.pdf
%TEMP%\opera installer\criticalbreachdetected.pdf
%TEMP%\wpdnse\criticalbreachdetected.pdf
%LOCALAPPDATA%\programs\criticalbreachdetected.pdf
%LOCALAPPDATA%\<INETFILES>\criticalbreachdetected.pdf
%LOCALAPPDATA%\thunderbird\profiles\criticalbreachdetected.pdf
%LOCALAPPDATA%\thunderbird\profiles\49zr3fqa.default\criticalbreachdetected.pdf
%LOCALAPPDATA%\thunderbird\profiles\npsdfqy3.default-release\criticalbreachdetected.pdf
%LOCALAPPDATA%\thunderbird\profiles\npsdfqy3.default-release\cache2\criticalbreachdetected.pdf
%LOCALAPPDATA%\thunderbird\profiles\npsdfqy3.default-release\cache2\doomed\criticalbreachdetected.pdf
%LOCALAPPDATA%\thunderbird\profiles\npsdfqy3.default-release\cache2\entries\criticalbreachdetected.pdf
%LOCALAPPDATA%\thunderbird\profiles\npsdfqy3.default-release\safebrowsing\criticalbreachdetected.pdf
%LOCALAPPDATA%\thunderbird\profiles\npsdfqy3.default-release\safebrowsing\google4\criticalbreachdetected.pdf
%LOCALAPPDATA%\thunderbird\profiles\npsdfqy3.default-release\startupcache\criticalbreachdetected.pdf
%LOCALAPPDATA%\thunderbird\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\feeds\criticalbreachdetected.pdf
%LOCALAPPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\safebrowsing\google4\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\credentials\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ar\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\nl\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\no\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pl\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pt_br\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pt_pt\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ro\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ru\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sk\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\lt\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\lv\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sl\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\th\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\tr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\uk\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\vi\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\zh_cn\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\zh_tw\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sv\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ko\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ja\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\it\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\bg\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ca\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\cs\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\da\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\de\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\el\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en_gb\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en_us\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ar\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\es\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\et\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fi\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fil\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\he\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hi\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hu\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\id\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\es_419\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\bg\criticalbreachdetected.pdf
%LOCALAPPDATA%\history\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ca\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sk\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sl\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\th\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\tr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\uk\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\vi\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_cn\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ru\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\se\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_tw\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\jumplisticons\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\jumplisticonsold\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\session storage\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\evwhitelist\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\pepperflash\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\pnacl\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\swiftshader\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\widevinecdm\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\__macosx\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\__macosx\_locales\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ro\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_pt\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_br\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\da\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\de\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\el\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\en\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\es\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fi\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fil\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hi\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\cs\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\id\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\it\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ja\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ko\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lt\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lv\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\nl\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\no\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pl\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hu\criticalbreachdetected.pdf
%LOCALAPPDATA%\microsoft\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\15\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\16\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\17\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\default\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\default\moz-extension+++d39c0de0-06d0-4e01-844c-98b240b2f278^usercontextid=4294967295\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\default\moz-extension+++d39c0de0-06d0-4e01-844c-98b240b2f278^usercontextid=4294967295\idb\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\default\moz-extension+++d39c0de0-06d0-4e01-844c-98b240b2f278^usercontextid=4294967295\idb\3647222921wleabceoxlt-eengsairo.f...
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sessionstore-backups\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\1657114595amcateirvtisty.files\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\2918063365piupsah.files\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\3561288849sdhlie.files\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.files\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\temporary\criticalbreachdetected.pdf
%APPDATA%\mozilla\systemextensionsdev\criticalbreachdetected.pdf
%APPDATA%\telegram desktop\criticalbreachdetected.pdf
%APPDATA%\thunderbird\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.files\criticalbreachdetected.pdf
%APPDATA%\thunderbird\crash reports\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.files\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\security_state\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\minidumps\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\gmp-widevinecdm\4.10.1582.2\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\default\moz-extension+++db487e04-ae57-4773-9556-37dac4cedf3c^usercontextid=4294967295\idb\3647222921wleabceoxlt-eengsairo.fil...
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.files\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\1657114595amcateirvtisty.files\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\2918063365piupsah.files\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\3561288849sdhlie.files\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\default\moz-extension+++db487e04-ae57-4773-9556-37dac4cedf3c^usercontextid=4294967295\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.files\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\bcjnbgva.default\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\bookmarkbackups\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\crashes\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\crashes\events\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\extensions\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\temporary\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\gmp-widevinecdm\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\default\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\default\moz-extension+++db487e04-ae57-4773-9556-37dac4cedf3c^usercontextid=4294967295\idb\criticalbreachdetected.pdf
%APPDATA%\thunderbird\crash reports\events\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\npsdfqy3.default-release\criticalbreachdetected.pdf
%HOMEPATH%\favorites\criticalbreachdetected.pdf
%HOMEPATH%\favorites\links\criticalbreachdetected.pdf
%HOMEPATH%\favorites\links for united states\criticalbreachdetected.pdf
%HOMEPATH%\favorites\microsoft websites\criticalbreachdetected.pdf
%HOMEPATH%\favorites\msn websites\criticalbreachdetected.pdf
%HOMEPATH%\favorites\windows live\criticalbreachdetected.pdf
%HOMEPATH%\links\criticalbreachdetected.pdf
%HOMEPATH%\local settings\criticalbreachdetected.pdf
%HOMEPATH%\documents\my videos\criticalbreachdetected.pdf
%HOMEPATH%\downloads\criticalbreachdetected.pdf
%HOMEPATH%\music\criticalbreachdetected.pdf
%HOMEPATH%\pictures\criticalbreachdetected.pdf
%HOMEPATH%\printhood\criticalbreachdetected.pdf
%HOMEPATH%\recent\criticalbreachdetected.pdf
%HOMEPATH%\saved games\criticalbreachdetected.pdf
%HOMEPATH%\searches\criticalbreachdetected.pdf
%HOMEPATH%\sendto\criticalbreachdetected.pdf
%HOMEPATH%\start menu\criticalbreachdetected.pdf
%HOMEPATH%\templates\criticalbreachdetected.pdf
%HOMEPATH%\my documents\criticalbreachdetected.pdf
%HOMEPATH%\nethood\criticalbreachdetected.pdf
%HOMEPATH%\documents\my pictures\criticalbreachdetected.pdf
%HOMEPATH%\documents\criticalbreachdetected.pdf
%HOMEPATH%\videos\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\npsdfqy3.default-release\crashes\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\npsdfqy3.default-release\crashes\events\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\archived\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\archived\2022-09\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\npsdfqy3.default-release\extensions\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\npsdfqy3.default-release\minidumps\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\npsdfqy3.default-release\saved-telemetry-pings\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\default\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\permanent\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\permanent\chrome\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\permanent\chrome\idb\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.files\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\temporary\criticalbreachdetected.pdf
%HOMEPATH%\application data\criticalbreachdetected.pdf
%HOMEPATH%\contacts\criticalbreachdetected.pdf
%HOMEPATH%\cookies\criticalbreachdetected.pdf
%HOMEPATH%\desktop\criticalbreachdetected.pdf
%APPDATA%\thunderbird\pending pings\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\49zr3fqa.default\criticalbreachdetected.pdf
%APPDATA%\thunderbird\profiles\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\sessionstore-backups\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\saved-telemetry-pings\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\42\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\43\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\44\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\45\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\46\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\47\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\48\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\4\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\49\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\41\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\50\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\52\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\53\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\54\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\55\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\56\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\57\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\58\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\5\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\39\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\51\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\38\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\37\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\18\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\2\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\20\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\21\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\22\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\23\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\24\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\25\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\26\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\27\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\19\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\28\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\3\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\30\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\31\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\32\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\33\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\34\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\35\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\36\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\59\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\29\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\6\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\40\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\60\criticalbreachdetected.pdf
%APPDATA%\microsoft\systemcertificates\criticalbreachdetected.pdf
%APPDATA%\microsoft\systemcertificates\my\certificates\criticalbreachdetected.pdf
%APPDATA%\microsoft\systemcertificates\my\crls\criticalbreachdetected.pdf
%APPDATA%\microsoft\systemcertificates\my\ctls\criticalbreachdetected.pdf
%APPDATA%\mozilla\criticalbreachdetected.pdf
%APPDATA%\mozilla\extensions\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\crash reports\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\crash reports\events\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\pending pings\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\bookmarkbackups\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\crashes\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\crashes\events\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\extensions\criticalbreachdetected.pdf
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\minidumps\criticalbreachdetected.pdf
%APPDATA%\microsoft\protect\s-1-5-21-1238866942-1249195528-555854008-1000\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\61\criticalbreachdetected.pdf
%APPDATA%\microsoft\systemcertificates\my\criticalbreachdetected.pdf
%APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\criticalbreachdetected.pdf
%APPDATA%\microsoft\internet explorer\quick launch\user pinned\implicitappshortcuts\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\63\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\7\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\8\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\9\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\host\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\muffin\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\security\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\jre1.8.0_45_x64\criticalbreachdetected.pdf
%APPDATA%\criticalbreachdetected.pdf
%LOCALAPPDATA%low\sun\java\deployment\cache\6.0\62\criticalbreachdetected.pdf
%APPDATA%\identities\criticalbreachdetected.pdf
%APPDATA%\media center programs\criticalbreachdetected.pdf
%APPDATA%\microsoft\criticalbreachdetected.pdf
%APPDATA%\microsoft\credentials\criticalbreachdetected.pdf
%APPDATA%\microsoft\crypto\criticalbreachdetected.pdf
%APPDATA%\microsoft\crypto\rsa\criticalbreachdetected.pdf
%APPDATA%\microsoft\crypto\rsa\s-1-5-21-1238866942-1249195528-555854008-1000\criticalbreachdetected.pdf
%APPDATA%\microsoft\internet explorer\criticalbreachdetected.pdf
%APPDATA%\microsoft\internet explorer\quick launch\criticalbreachdetected.pdf
%APPDATA%\microsoft\internet explorer\quick launch\user pinned\criticalbreachdetected.pdf
%APPDATA%\identities\{d59a8b31-5854-4768-ba01-cd66beadf546}\criticalbreachdetected.pdf
%APPDATA%\microsoft\protect\criticalbreachdetected.pdf
%HOMEPATH%\documents\my music\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\hu\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\patch\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\patch\x64\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\packages\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\packages\vcruntimeminimum_x86\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\oracle\java\javapath\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{295d1583-fdb9-414b-a4c8-da539362a26b}\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages\vcruntimeadditional_amd64\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\packages\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\packages\vcruntimeadditional_x86\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\packages\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\oracle\java\installcache_x64\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\oracle\java\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\oracle\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows defender\support\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows nt\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\activitylog\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\common coverpages\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\common coverpages\en-us\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\inbox\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\queue\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\sentitems\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows defender\scans\history\store\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\virtualinbox\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows nt\msscan\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\wpd\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\wwansvc\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft help\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\mozilla\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\mozilla\updates\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\mozilla\updates\308046b0af4a39cb\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\mozilla\updates\d78bf5dd33499ec2\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\mozilla\updates\e7cf176e110c211b\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\virtualinbox\en-us\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\packages\vcruntimeminimum_amd64\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages\criticalbreachdetected.pdf
C:\users\default\appdata\roaming\microsoft\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages\vcruntimeadditional_amd64\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages\vcruntimeadditional_x86\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{fd9b6070-d13e-45dc-819b-41806bf45b6b}\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\start menu\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\sun\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\sun\java\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\sun\java\java update\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\packages\vcruntimeminimum_amd64\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{f65db027-aff3-4070-886a-0d87064aabb1}\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\templates\criticalbreachdetected.pdf
C:\users\default\appdata\local\criticalbreachdetected.pdf
C:\users\default\appdata\local\application data\criticalbreachdetected.pdf
C:\users\default\appdata\local\history\criticalbreachdetected.pdf
C:\users\default\appdata\local\microsoft\criticalbreachdetected.pdf
C:\users\default\appdata\local\temp\criticalbreachdetected.pdf
C:\users\default\appdata\local\<INETFILES>\criticalbreachdetected.pdf
C:\users\default\appdata\roaming\criticalbreachdetected.pdf
C:\users\default\appdata\roaming\media center programs\criticalbreachdetected.pdf
C:\users\default\criticalbreachdetected.pdf
C:\users\default\appdata\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\packages\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14.29.30133\packages\vcruntimeminimum_x86\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\packages\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\packages\vcruntimeadditional_amd64\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\packages\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\packages\vcruntimeminimum_amd64\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages\vcruntimeadditional_x86\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\packages\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\packages\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\packages\vcruntimeminimum_amd64\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\packages\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\packages\vcruntimeadditional_amd64\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14.29.30133\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14.29.30133\packages\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\packages\vcruntimeminimum_x86\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows defender\scans\history\service\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows defender\scans\history\results\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\device stage\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\adobe\arm\s\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\adobe\arm\{291aa914-a987-4ce9-bd63-ac0a92d435e5}\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\adobe\setup\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\application data\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\desktop\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\documents\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\favorites\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\adobe\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\adobe\arm\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\assistance\client\1.0\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\assistance\client\1.0\en-us\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\crypto\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\crypto\dss\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\crypto\dss\machinekeys\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\crypto\keys\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\crypto\rsa\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\crypto\rsa\machinekeys\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\assistance\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\assistance\client\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\criticalbreachdetected.pdf
C:\users\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\criticalbreachdetected.pdf
C:\kms\criticalbreachdetected.pdf
C:\msocache\criticalbreachdetected.pdf
C:\msocache\all users\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\criticalbreachdetected.pdf
<Current directory>\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\criticalbreachdetected.pdf
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\crypto\rsa\s-1-5-18\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\device stage\device\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows defender\scans\history\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\rac\outbound\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\rac\publisheddata\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\rac\statedata\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\rac\temp\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\search\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\search\data\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\search\data\applications\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\search\data\temp\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\officesoftwareprotectionplatform\cache\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\rac\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\user account pictures\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows defender\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows defender\definition updates\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows defender\definition updates\backup\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows defender\definition updates\updates\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows defender\definition updates\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows defender\localcopy\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows defender\quarantine\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows defender\scans\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\user account pictures\default pictures\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\vault\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\officesoftwareprotectionplatform\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\office\uicaptions\3082\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\office\uicaptions\1036\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\device stage\task\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-us\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-us\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\devicesync\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\drm\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\drm\server\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\ehome\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\ehome\logs\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\media player\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\mf\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\msdn\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\msdn\8.0\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\network\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\network\connections\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\network\downloader\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\office\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\office\uicaptions\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\identitycrl\criticalbreachdetected.pdf
%ALLUSERSPROFILE%\microsoft\windows defender\scans\history\cachemanager\criticalbreachdetected.pdf
C:\users\default\appdata\roaming\microsoft\internet explorer\criticalbreachdetected.pdf
C:\users\default\appdata\roaming\microsoft\internet explorer\quick launch\criticalbreachdetected.pdf
C:\users\default\application data\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\he\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hi\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hu\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\id\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\it\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ja\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fi\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ko\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\lv\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\no\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pl\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pt_br\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pt_pt\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ro\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ru\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sk\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\lt\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sl\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\nl\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fil\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\es\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\en\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sk\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sl\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sv\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\th\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\tr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\uk\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\vi\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ro\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\zh_cn\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ar\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\bg\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ca\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\cs\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\da\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\de\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\zh_tw\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\el\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\pt_pt\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ru\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\uk\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ko\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\lt\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\lv\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\nl\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\no\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\pl\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\pt_br\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\pt_pt\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\it\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ja\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ro\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\sl\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\sr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\sv\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\th\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\tr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\uk\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\vi\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\zh_cn\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ru\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\sk\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\id\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\hr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\zh_tw\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\vi\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\zh_cn\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\zh_tw\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ar\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\bg\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ca\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\cs\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\da\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\de\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\el\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\en\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\es\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\fi\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\fil\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\fr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\he\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\hi\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sv\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\tr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\th\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\pt_br\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\pl\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\no\criticalbreachdetected.pdf
C:\users\public\documents\my videos\criticalbreachdetected.pdf
C:\users\public\downloads\criticalbreachdetected.pdf
C:\users\public\favorites\criticalbreachdetected.pdf
C:\users\public\libraries\criticalbreachdetected.pdf
C:\users\public\music\criticalbreachdetected.pdf
C:\users\public\music\sample music\criticalbreachdetected.pdf
C:\users\public\pictures\criticalbreachdetected.pdf
C:\users\public\documents\criticalbreachdetected.pdf
C:\users\public\pictures\sample pictures\criticalbreachdetected.pdf
C:\users\public\documents\my pictures\criticalbreachdetected.pdf
C:\users\public\recorded tv\sample media\criticalbreachdetected.pdf
C:\users\public\videos\sample videos\criticalbreachdetected.pdf
%HOMEPATH%\criticalbreachdetected.pdf
%HOMEPATH%\appdata\criticalbreachdetected.pdf
%LOCALAPPDATA%\criticalbreachdetected.pdf
%LOCALAPPDATA%\application data\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\criticalbreachdetected.pdf
C:\users\public\recorded tv\criticalbreachdetected.pdf
C:\users\public\desktop\criticalbreachdetected.pdf
C:\users\public\videos\criticalbreachdetected.pdf
C:\users\public\criticalbreachdetected.pdf
C:\users\default user\criticalbreachdetected.pdf
C:\users\default\cookies\criticalbreachdetected.pdf
C:\users\default\documents\criticalbreachdetected.pdf
C:\users\default\documents\my music\criticalbreachdetected.pdf
C:\users\default\documents\my pictures\criticalbreachdetected.pdf
C:\users\default\documents\my videos\criticalbreachdetected.pdf
C:\users\default\downloads\criticalbreachdetected.pdf
C:\users\default\favorites\criticalbreachdetected.pdf
C:\users\default\links\criticalbreachdetected.pdf
C:\users\default\local settings\criticalbreachdetected.pdf
C:\users\default\music\criticalbreachdetected.pdf
C:\users\default\desktop\criticalbreachdetected.pdf
C:\users\default\my documents\criticalbreachdetected.pdf
C:\users\default\pictures\criticalbreachdetected.pdf
C:\users\default\printhood\criticalbreachdetected.pdf
C:\users\default\recent\criticalbreachdetected.pdf
C:\users\default\saved games\criticalbreachdetected.pdf
C:\users\default\sendto\criticalbreachdetected.pdf
C:\users\default\start menu\criticalbreachdetected.pdf
C:\users\default\templates\criticalbreachdetected.pdf
C:\users\default\videos\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\application\criticalbreachdetected.pdf
C:\users\default\nethood\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\criticalbreachdetected.pdf
C:\users\public\documents\my music\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\default_apps\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\en_gb\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\es\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\es_419\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\et\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\eu\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\fi\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\fil\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\fr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\he\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\hi\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\hr\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\hu\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\id\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\it\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ja\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ko\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\lt\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\lv\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ms\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\nl\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\el\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\extensions\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\en_us\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\da\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\cs\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\pepperflash\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\visualelements\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\caps\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\cache\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\databases\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extension rules\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\installer\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extension state\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\__macosx\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ar\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\bg\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ca\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\criticalbreachdetected.pdf
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\de\criticalbreachdetected.pdf
D:\criticalbreachdetected.pdf

Moves the following files

from %TEMP%\dd_vcredist_amd64_20220928170114.log to %TEMP%\dd_vcredist_amd64_20220928170114.log.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\3561288849sdhlie.sqlite to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\3561288849sdhlie.sqlite.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\2918063365piupsah.sqlite to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\2918063365piupsah.sqlite.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.sqlite to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.sqlite.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sessionstore-backups\previous.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sessionstore-backups\previous.jsonlz4.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sessionstore-backups\upgrade.jsonlz4-20200708170202 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sessionstore-backups\upgrade.jsonlz4-20200708170202.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\a847dc89-db3d-4896-9bef-b610ec76e43d to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\a847dc89-db3d-4896-9bef-b610ec76e43d.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sitesecurityservicestate.txt to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sitesecurityservicestate.txt.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\securitypreloadstate.txt to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\securitypreloadstate.txt.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\search.json.mozlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\search.json.mozlz4.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\default\moz-extension+++d39c0de0-06d0-4e01-844c-98b240b2f278^usercontextid=4294967295\idb\3647222921wleabceoxlt-eengsairo.s... to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\default\moz-extension+++d39c0de0-06d0-4e01-844c-98b240b2f278^usercontextid=4294967295\idb\3647222921wleabceoxlt-eengsairo.s...
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sessioncheckpoints.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sessioncheckpoints.json.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\default\moz-extension+++d39c0de0-06d0-4e01-844c-98b240b2f278^usercontextid=4294967295\.metadata-v2 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\default\moz-extension+++d39c0de0-06d0-4e01-844c-98b240b2f278^usercontextid=4294967295\.metadata-v2.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sessionstore-backups\recovery.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\sessionstore-backups\recovery.jsonlz4.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\shield-preference-experiments.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\shield-preference-experiments.json.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160264.0186ea91-e835-4919-9366-c7e15b92110b.first-shutdown.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160264.0186ea91-e835-4919-9366-c7e15b92110b.first-shutdown.jsonlz4.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\extension-preferences.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\extension-preferences.json.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\ee43e28f-610b-4229-a7d7-171f6ed032bd to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\ee43e28f-610b-4229-a7d7-171f6ed032bd.rhysida
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\.metadata-v2 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\.metadata-v2.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\trrblacklist.txt to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\trrblacklist.txt.rhysida
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage.sqlite.rhysida
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\places.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\places.sqlite.rhysida
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\saved-telemetry-pings\a6077284-6dcc-4781-9fb7-7f9d7b5132bf to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\saved-telemetry-pings\a6077284-6dcc-4781-9fb7-7f9d7b5132bf.rhysida
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite.rhysida
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\times.json to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\times.json.rhysida
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\webappsstore.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\webappsstore.sqlite.rhysida
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\xulstore.json to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\xulstore.json.rhysida
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\permanent\chrome\.metadata-v2 to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\permanent\chrome\.metadata-v2.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\gmp-widevinecdm\4.10.1582.2\license.txt to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\gmp-widevinecdm\4.10.1582.2\license.txt.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite.rhysida
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\sitesecurityservicestate.txt to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\sitesecurityservicestate.txt.rhysida
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\search.json.mozlz4 to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\search.json.mozlz4.rhysida
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\sessioncheckpoints.json to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\sessioncheckpoints.json.rhysida
from %APPDATA%\thunderbird\profiles\49zr3fqa.default\times.json to %APPDATA%\thunderbird\profiles\49zr3fqa.default\times.json.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\1f6a84f6-29b5-43da-aa85-b8cf32dd80d0 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\1f6a84f6-29b5-43da-aa85-b8cf32dd80d0.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\times.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\times.json.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\user.js to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\user.js.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\xulstore.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\xulstore.json.rhysida
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\securitypreloadstate.txt to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\securitypreloadstate.txt.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\d9d62ad7-4327-4aa9-97e7-aeb5486c45ee to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\saved-telemetry-pings\d9d62ad7-4327-4aa9-97e7-aeb5486c45ee.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\gmp-widevinecdm\4.10.1582.2\widevinecdm.dll.sig to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\gmp-widevinecdm\4.10.1582.2\widevinecdm.dll.sig.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\prefs.js to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\prefs.js.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\state.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\state.json.rhysida
from %TEMP%\rgi5839.tmp to %TEMP%\rgi5839.tmp.rhysida
from %APPDATA%\mozilla\firefox\crash reports\installtime20200708170202 to %APPDATA%\mozilla\firefox\crash reports\installtime20200708170202.rhysida
from %APPDATA%\microsoft\protect\credhist to %APPDATA%\microsoft\protect\credhist.rhysida
from %APPDATA%\microsoft\protect\s-1-5-21-1238866942-1249195528-555854008-1000\71e6321a-7203-4cd6-882b-58bcea299d05 to %APPDATA%\microsoft\protect\s-1-5-21-1238866942-1249195528-555854008-1000\71e6321a-7203-4cd6-882b-58bcea299d05.rhysida
from %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1238866942-1249195528-555854008-1000\f58155b4b1d5a524ca0261c3ee99fb50_d4602615-9d50-4880-be41-678935e93eaa to %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1238866942-1249195528-555854008-1000\f58155b4b1d5a524ca0261c3ee99fb50_d4602615-9d50-4880-be41-678935e93eaa.rhysida
from %APPDATA%\microsoft\protect\s-1-5-21-1238866942-1249195528-555854008-1000\287f130a-462c-4a7f-849e-2a483f125b7d to %APPDATA%\microsoft\protect\s-1-5-21-1238866942-1249195528-555854008-1000\287f130a-462c-4a7f-849e-2a483f125b7d.rhysida
from %APPDATA%\microsoft\protect\s-1-5-21-1238866942-1249195528-555854008-1000\preferred to %APPDATA%\microsoft\protect\s-1-5-21-1238866942-1249195528-555854008-1000\preferred.rhysida
from %TEMP%\rgi5839.tmp-tmp to %TEMP%\rgi5839.tmp-tmp.rhysida
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\saved-telemetry-pings\d092fa80-6cc0-49cc-9da4-f67b3d6cdc55 to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\saved-telemetry-pings\d092fa80-6cc0-49cc-9da4-f67b3d6cdc55.rhysida
from %TEMP%\dd_vcredist_x86_20220928170335_002_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20220928170335_002_vcruntimeadditional_x86.log.rhysida
from %TEMP%\tmpaddon to %TEMP%\tmpaddon.rhysida
from %TEMP%\setupexe(20220928171621f0c).log to %TEMP%\setupexe(20220928171621f0c).log.rhysida
from %TEMP%\wmsetup.log to %TEMP%\wmsetup.log.rhysida
from %TEMP%\microsoft .net framework 4 setup_20230531_155457219-msi_netfx_extended_x64.msi.txt to %TEMP%\microsoft .net framework 4 setup_20230531_155457219-msi_netfx_extended_x64.msi.txt.rhysida
from %TEMP%\microsoft .net framework 4 setup_20230531_155457219-msi_netfx_core_x64.msi.txt to %TEMP%\microsoft .net framework 4 setup_20230531_155457219-msi_netfx_core_x64.msi.txt.rhysida
from %TEMP%\dd_wcf_ca_smci_20230531_225945_094.txt to %TEMP%\dd_wcf_ca_smci_20230531_225945_094.txt.rhysida
from %TEMP%\dd_wcf_ca_smci_20230531_225943_157.txt to %TEMP%\dd_wcf_ca_smci_20230531_225943_157.txt.rhysida
from %TEMP%\dd_vcredist_amd64_20220928170250.log to %TEMP%\dd_vcredist_amd64_20220928170250.log.rhysida
from %TEMP%\opera_crashreporter.log to %TEMP%\opera_crashreporter.log.rhysida
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\saved-telemetry-pings\e60182f3-3480-48d0-bc12-b3b897042a6b to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\saved-telemetry-pings\e60182f3-3480-48d0-bc12-b3b897042a6b.rhysida
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\bookmarkbackups\bookmarks-2022-09-28_11_3a7quggif+d7xxwa176j2q==.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\bookmarkbackups\bookmarks-2022-09-28_11_3a7quggif+d7xxwa176j2q==.jsonlz4.rhysida
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\places.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\places.sqlite.rhysida
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\content-prefs.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\content-prefs.sqlite.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\extensions.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\extensions.json.rhysida
from %APPDATA%\mozilla\firefox\profiles\bcjnbgva.default\user.js to %APPDATA%\mozilla\firefox\profiles\bcjnbgva.default\user.js.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\addonstartup.json.lz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\addonstartup.json.lz4.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\bookmarkbackups\bookmarks-2023-07-04_11_wowu13vthwkcthdlkwm-la==.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\bookmarkbackups\bookmarks-2023-07-04_11_wowu13vthwkcthdlkwm-la==.jsonlz4.rhysida
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\containers.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\containers.json.rhysida
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\webappsstore.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\webappsstore.sqlite.rhysida
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\3561288849sdhlie.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\3561288849sdhlie.sqlite.rhysida
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759476.fbcd22a2-e53a-4131-9ef1-1935f505d9ca.event.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759476.fbcd22a2-e53a-4131-9ef1-1935f505d9ca.event.jsonlz4.rhysida
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\1657114595amcateirvtisty.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\1657114595amcateirvtisty.sqlite.rhysida
from %TEMP%\microsoft visual c++ 2010 x86 redistributable setup_20220928_165304913-msi_vc_red.msi.txt to %TEMP%\microsoft visual c++ 2010 x86 redistributable setup_20220928_165304913-msi_vc_red.msi.txt.rhysida
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\default\moz-extension+++db487e04-ae57-4773-9556-37dac4cedf3c^usercontextid=4294967295\.metadata-v2 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\default\moz-extension+++db487e04-ae57-4773-9556-37dac4cedf3c^usercontextid=4294967295\.metadata-v2.rhysida
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\saved-telemetry-pings\fbcd22a2-e53a-4131-9ef1-1935f505d9ca to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\saved-telemetry-pings\fbcd22a2-e53a-4131-9ef1-1935f505d9ca.rhysida
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\sessionstore-backups\recovery.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\sessionstore-backups\recovery.jsonlz4.rhysida
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\shield-preference-experiments.json to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\shield-preference-experiments.json.rhysida
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\securitypreloadstate.txt to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\securitypreloadstate.txt.rhysida
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\prefs.js to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\prefs.js.rhysida
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\handlers.json to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\handlers.json.rhysida
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\saved-telemetry-pings\dc5a4164-f290-4a08-a5ec-0fe7810acbc6 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\saved-telemetry-pings\dc5a4164-f290-4a08-a5ec-0fe7810acbc6.rhysida
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\prefs.js to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\prefs.js.rhysida

Modifies the following files

C:\kms\kms_vl_all_aio_debug.log.rhysida
%ALLUSERSPROFILE%\microsoft\crypto\rsa\s-1-5-18\6d14e4b1d8ca773bab785d1be032546e_d4602615-9d50-4880-be41-678935e93eaa.rhysida
%ALLUSERSPROFILE%\microsoft\assistance\client\1.0\en-us\help_cvalidator.h1d.rhysida
%ALLUSERSPROFILE%\microsoft\assistance\client\1.0\en-us\help_mvalidator.h1d.rhysida
%ALLUSERSPROFILE%\microsoft\assistance\client\1.0\en-us\help_mtoc_help.h1h.rhysida
%ALLUSERSPROFILE%\microsoft\assistance\client\1.0\en-us\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q.rhysida
%ALLUSERSPROFILE%\microsoft\assistance\client\1.0\en-us\help_mvalidator.lck.rhysida
%ALLUSERSPROFILE%\microsoft\assistance\client\1.0\en-us\help_mkwd_bestbet.h1w.rhysida
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.xml.rhysida
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.xml.rhysida
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\pss10r.chm.rhysida
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.xml.rhysida
%ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acrordrdcupd1501020056.msp.rhysida
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\setup.xml.rhysida
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.xml.rhysida
C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.xml.rhysida
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\setup.xml.rhysida
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.xml.rhysida
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.xml.rhysida
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.xml.rhysida
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\setup.xml.rhysida
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\setup.xml.rhysida
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\setup.xml.rhysida
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.xml.rhysida
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.xml.rhysida
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.rhysida
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\office32ww.xml.rhysida
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\proplusww.xml.rhysida
%ALLUSERSPROFILE%\microsoft\assistance\client\1.0\en-us\help_mkwd_assetid.h1w.rhysida
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\microsoft.vc90.crt.manifest.rhysida

Modifies multiple files.

Substitutes the following files

%ALLUSERSPROFILE%\Microsoft\User Account Pictures\user.dat
%APPDATA%\Thunderbird\Profiles\npsdfqy3.default-release\SiteSecurityServiceState.txt
%APPDATA%\Mozilla\Firefox\Profiles\yfwt7ezn.default-release-1\TRRBlacklist.txt
%APPDATA%\Mozilla\Firefox\Profiles\yfwt7ezn.default-release-1\SecurityPreloadState.txt
%APPDATA%\Mozilla\Firefox\Profiles\0j9e9tku.default-release\SecurityPreloadState.txt
%TEMP%\opera_crashreporter.log
%TEMP%\~DF184E61D439A0AB73.TMP
%TEMP%\~DF55602E457DF4BC10.TMP
%LOCALAPPDATA%\Thunderbird\Profiles\npsdfqy3.default-release\.startup-incomplete
%APPDATA%\Thunderbird\Profiles\npsdfqy3.default-release\SecurityPreloadState.txt
%TEMP%\~DFDF69965777231528.TMP
%TEMP%\~DFAFB92A503E9CD340.TMP
%TEMP%\~DFF18D6906B09C3058.TMP
%LOCALAPPDATA%\Google\Chrome\User Data\Default\JumpListIcons\732F.tmp
%LOCALAPPDATA%\Google\Chrome\User Data\Default\JumpListIcons\732E.tmp
%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extension State\LOCK
%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extension Rules\000003.log
%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extension Rules\LOCK
C:\Users\Default\NTUSER.DAT.LOG2
%TEMP%\~DF236F132CD15F8E0C.TMP
%HOMEPATH%\Searches\Indexed Locations.search-ms

Changes user data files extensions (Trojan.Encoder).

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial